Skip to content

v0.4.0 — governed tracing + LLM provider registry

Choose a tag to compare

View all tags
@jozer-rami jozer-rami released this 20 Jul 04:05
· 943 commits to main since this release
v0.4.0
1cac1fe
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • Platform-wide governed tracing — session replay, prompt-history capture, a trace-maintenance worker, and gateway ingest routes for governed agent-run events.
  • LLM provider registry — per-provider credentials, per-session model selection, and an operator allowlist, via the new @clerum/llm-providers package.
  • Member-registration runtime access completed — reconciles the least-privilege runtime role for member_registration_credentials (migration 0069).
  • SSRF hardening — http_request now blocks IP-literal private targets.

Quickstart & deploy fixes

  • control-ui CostShell builds correctly in the production image.
  • make minikube-setup provisions the control-api / workflow-recipes / trace-maintenance runtime database roles, so those controllers start cleanly on a fresh cluster.
  • Member-registration setup degrades gracefully when the (optional) sibling checkout is absent — it generates a local dev HMAC and continues instead of aborting.

Plus accumulated fixes since v0.3.0.

🤖 Generated with Claude Code

Assets 8
Loading