v0.7.0 — adopt first, enforce when the numbers say so

v0.6.0 made governance drop-in and provable. v0.7.0 makes it adoptable — you don't have to flip enforcement on to start.

Highlights

• Observe mode — the do-nothing on-ramp. Set a pool to observe and the real decision engine runs on every request and records exactly what it would have done — blocking nothing, moving no counters, paging no one (freeze and no-policy still enforce). The new Observe console reads those rows back as the flip-to-enforce case: per pool over 7 days, what enforcement would have denied or escalated, the dollars behind it, the exact codes that would fire — the real ledger with enforcement stood down, never a simulation. Flip a pool observe→enforce in one confirm-gated click; the policy revision chain records precisely when enforcement went live. Point Sanction at a live fleet, watch a week, enforce when the numbers convince you.
• Sanction Local — from runtime to install. The air-gapped runtime now has its install package: the no-egress policy pack (only on-box tools pass; every cloud call denies and persists as evidence) and the Audit console's one-click signed, hash-chained evidence export an assessor verifies self-contained. Regulated practices can actually stand it up.
• @sanction/sdk is publish-ready. 0.6.0, FSL-licensed, with the escalate→grant loop closed in the client — poll a pending approval for its one-use grant and redeem on retry. npm install @sanction/sdk once the publish workflow runs.
• The approval email lands you on the decision. Escalation notices — email, Slack, signed webhook — now deep-link to that pending request, not a generic inbox. One click from the alert to the decision waiting on you.
• Pay-per-crawl, governed. The first mandate-authority slice: when the metered web answers 402 with a price, sanctionedFetch runs the quote through /authorize as a real spend decision — budgets, escalation, and audit before a cent of payment intent leaves your stack.

Also since v0.6.0

• Org roots read the whole subtree — a parent wallet's Overview, Spend, Tokens, Outcomes, Credentials, and Approvals show every pool beneath it instead of an empty page (a no-op for leaf operators).
• Three staged demo companies with 30-day histories and a daily warm pulse; a dedicated /consulting services page.

Full detail: changelog · roadmap · Observe your fleet first