CRAP v0.1.0-alpha.5

CRAP for one owner, one active proxy and personally owned Claude subscriptions. Linux amd64.

This release adds LAN-aware client setup and an optional certificate-authenticated LAN entrypoint. The shell can select the configured LAN route before launching Claude, with Tailscale fallback. The strict gateway now supports authenticated model discovery.

It also fixes proxy startup with existing persisted configuration, compresses panel assets, and lets ledger/routing pages load without waiting for unrelated startup requests.

The complete release checks, integration/recovery tests and candidate scan gates passed. The exact tested CRAP images are published to GHCR. CLIProxyAPI and PostgreSQL remain independently maintained dependencies.

Use published-images.json and GHCR-SHA256SUMS for immutable deployment references. The full candidate archive includes matching images, source, inventories and scan evidence. Verify it with RELEASE-SHA256SUMS.

The optional LAN listener requires private server/client certificates and an ingress allowlist. It does not replace API-key checks or open proxy management. See the LAN deployment guide, including the optional application-scoped Cilium policy where required.

Back up the workspace before upgrading. Single-replica updates can interrupt active responses. Publishing this release does not directly deploy or restart a workspace; configured GitOps automation may pick it up. See the README for personal-use and account-risk notices.