Skip to content

v0.6.0 — drop-in governance, provable history

Choose a tag to compare

View all tags
@ericlovold ericlovold released this 10 Jul 05:39
· 143 commits to main since this release
v0.6.0
86985bc
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.6.0 ships what a governance layer must do to be adopted and believed: drop in without a rewrite, and prove its own record.

Highlights

  • Framework adapters — the tool runs behind the decision. The SDK's new adapter layer puts authorization in front of execution: authorizeTool wraps any tool thunk (approved → run, escalated → wait for the one-use grant, denied → a typed planning outcome, not a crash), SanctionMiddleware wraps everything, and sanctionTool binds natively to Vercel AI SDK tools. The model plans freely; the tool executes behind an approve.
  • Tamper-evident audit exports. GET /v1/audit/export returns your decision history as a signed, hash-chained document — alter, drop, or reorder any row and the chain breaks at a named link. POST /v1/audit/verify (or any conforming verifier — it's self-contained) proves nothing changed after signing. Governance as cryptographic evidence.
  • What-if, replayed in order. POST /v1/policy/simulate with mode: "sequential" replays your real week chronologically — an early simulated denial frees budget for the request that came after, exactly as it would have lived.
  • The PDP grows armor. AuthZEN hardening sprint 2: single-use denial binding tokens (jti consumed atomically with the escalation it opens), batch pre-validation so a malformed sibling can't burn a grant, timeout-approvals that mint a redeemable grant instead of a dead loop, and per-agent rate limits with Retry-After on all four endpoints.
  • Capabilities ask first from any MCP host. sanction_authorize_capability brings skill/plugin/API governance to the MCP runtime — same ladder, same inbox, same one-use grants. sanction-mcp 0.5.0, ten tools, npx sanction-mcp.
  • The org owner sees the whole org. The console's Audit page now reads your entire wallet subtree — every department pool's decisions, tokens, and secret access, pool-attributed — and the Approvals inbox shows escalations waiting in the pools below you, read-only by design. The CFO who set the department budgets watches the same tree enforce them.

Also in this release

  • The storefront names the internal-governance buyer: departments as wallets, cost centers, chargeback for finance — and /consulting no longer 404s.
  • CI now pins the decision-note → machine-code contract (reworded reasons fail the build, not your agents) and the coverage ratchet holds at its new floors.

Full story: changelog · roadmap · docs

Assets 2
Loading