Added
- Opt-in
nexara-policycrate for deterministic one-line policy authoring. - Inspectable
PolicyContractrules, selectors, diagnostics, evaluations, and matched-rule metadata innexara-core. - Semantic tool capability and effect metadata for policy-level resource/action enforcement.
- Runtime policy contract enforcement with deny-by-default behavior for tools missing semantic capability metadata.
- Signed policy contract helpers for enterprise review workflows.
nexara-clicrate with policy compile, simulate, explain, sign, and verify commands.policy-shopdemo forreads orders, never refunds.- Policy authoring documentation and threat-model coverage.
Changed
- Updated release packaging and publish-order validation for the new policy and CLI crates.
- Updated Nexara website and architecture diagrams to show one-line policy authoring and runtime enforcement.
Fixed
- Runtime policy denials now emit audit records with matched-rule policy context.
Full Changelog: v0.1.0...v0.1.1