v0.4.0

Changelog

• 5aea7c9 ci(docs): 链接检查器与口词汇 guard
• a504d75 docs(core): 开源版自测指南与就绪核对
• 0f37876 docs(core): 更新 no-telemetry 不变量与 egress 披露
• 48362ba docs(core): 美化 README/文档、迁移配置参考并移除官网链接
• 591007d docs(deployment): Windows 安装改为 install.ps1 一行命令并补参数/升级/卸载/排障
• 5a42eb7 docs(install): install.sh 与发布配置指向 install.ps1，Scoop 降为备选
• 10266a1 docs(readme): README 与 security/oss-testing 的 Windows 安装口径改为 install.ps1
• 270a190 docs(release): 当前发行线引用升级为 v0.4.0
• 5a3965a feat(cli): run 启动时打印上游路由表与接入引导
• 6e5e963 feat(core): run 打印打码脱敏日志
• 4c5a2dd feat(core): 内嵌生产根/规则公钥并接通更新检查客户端
• f7a8eed feat(install): 两条路径输出下一步命令与 PATH 提示
• 74926bd feat(install): 新增 Windows PowerShell 一行安装脚本 install.ps1
• e5ca153 feat(privacy): update-check 转 active 并重生成披露
• 64a0325 feat(privacy): 机器可读 egress 清单（active/planned）与三处生成
• cdf41d7 feat(rules): rules sync 客户端（撤销与回退）
• aa8ee40 feat(rules): 核心规则 schema/解释器与不可削弱 floor
• cde3df6 feat(update): 包管理器优先的 update 命令与来源探测
• aa79066 feat(update): 清单新鲜度与防重放
• 1bbb603 feat(update): 自更新引擎（含 kill-switch 与回退）
• eed3180 fix(ci): 允许 oss-testing 文档中的合成示例密钥通过 gitleaks
• ed8fcd3 fix(egress): 去掉生成器错误的重复前缀
• 37ee8bf fix(proxy): IPv6 回环不可用时降级为仅监听 127.0.0.1
• d59f13f fix(rules): 撤销拒绝时保留已验签 active 包
• e8c58ca fix(rules): 撤销文档签名输入对空列表输出 [] 而非 null
• 45f0cd1 fix(security): 规则重放不清空 active、更新校验 os/arch，并清理未用测试助手
• 360ed22 fix(update): 平台校验改为可注入目标平台并修复跨平台测试
• fec8ddf fix(version): dev/预发布构建不再被版本门误拒
• 8cd1498 security: 撤销并移除泄露 token，补 Cloudflare 规则与工作树扫描
• 57019fd security: 更新/规则通道对抗评审与修复

---

Install: brew install --cask fregie/tap/tokenhush (macOS),
irm https://raw.githubusercontent.com/fregie/tokenhush/main/install.ps1 | iex
(Windows, or scoop install tokenhush), or the install.sh script (Linux).

v0.3.0

Changelog

• 3f88b50 docs(core): 同步 extension API 与 v0.3.0 迁移文档
• aa1a754 docs(core): 文档改为简洁通俗表达并移除用户向审计内容
• d61258a feat(core): 为 /v1/models 增加具名例外路由
• 9419556 feat(core): 在 gateway 响应路径调用 CostSink
• 918963c feat(core): 在 pkg/gateway 支持 Router 注入
• 5f255c0 feat(core): 嵌入共享生产 license 公钥
• e175bbf feat(core): 新增 9 个 agent 工具片段与路由矩阵
• c9f45ea fix(ci): 为合成密钥样本补充 gitleaks 窄 allowlist
• 24cb030 fix(test): 让 golden 基线在 Windows 上 CRLF 安全
• 7c2195f refactor(core): extract pkg/gateway assembly layer
• f3344c3 test(core): capture pre-extraction golden baseline

---

Install: brew install --cask fregie/tap/tokenhush (macOS),
scoop install tokenhush (Windows), or the install.sh script (Linux).

v0.2.0

Changelog

• 8b19a38 chore(cli): rename status license parameter to badge
• 59c514e chore(core): 整理依赖并通过文档门禁
• 02b6a73 ci(core): run golangci-lint
• 8bc35f5 docs(core): 审计边界更新为仅接缝并新增 v0.2.0 迁移说明
• c0ee183 refactor(core): 移除审计实现,控制面/config/daemon 仅保留接缝
• bc7ec9e test(cli): satisfy errcheck on deferred stop

---

Install: brew install --cask fregie/tap/tokenhush (macOS),
scoop install tokenhush (Windows), or the install.sh script (Linux).

v0.1.0

Changelog

• fb3aa13 chore(core): scaffold module, packages, lint config
• a9e3290 ci(core): add GoReleaser, brew tap, scoop bucket, install script
• 061e391 ci(core): add three-OS build and test workflow
• 07332b1 ci(core): allow BSD-3 modernc.org/mathutil in license gate
• e426d90 ci(core): allowlist test fixtures in gitleaks
• 940d082 ci(core): allowlist tokenhush placeholders in gitleaks
• 138792c ci(core): dependency license allowlist, SBOM and secret scan
• 7749f3b ci(core): ignore historical gitleaks finding in policy_test.go
• d27c077 ci(core): pin LF line endings for text sources
• 72e3196 docs(core): finalize public README, config, plugin and security docs
• 5cbbb2c feat(audit): add metadata-only SQLite audit store
• 7604fc4 feat(cli): add doctor diagnostics
• 978df5c feat(cli): add per-tool onboarding snippets
• ba51e1b feat(cli): add status and audit views
• b6a5f85 feat(config): add config with defaults, validation and upstreams override
• 4766d9f feat(core): add CLI entrypoint with version and stub commands
• fb57377 feat(core): display read-only Pro license status (isolated, fuzzed)
• 8783cac feat(core): implement foreground run daemon assembly
• 0a38268 feat(core): wire audit store into daemon and control API
• e58ae7b feat(extension): add capability-graded content plugin interfaces
• 7238cc7 feat(extension): add policy engine with fail-safe plugin handling
• 7936279 feat(platform): add cross-platform config/data paths
• fd664b7 feat(platform): add graded secret store with honest fallback
• 71de49d feat(platform): select argv-safe CGO-free keyring backend (M0)
• a353a53 feat(platform): stub service lifecycle (deferred past V1)
• 7d1548b feat(protocol): add protocol-agnostic JSON leaf walker
• 2f90405 feat(protocol): incremental SSE parse with sliding-window backfill
• cb8a495 feat(proxy): add authenticated control API
• 0f000d0 feat(proxy): add default upstream resolution + config override
• 6770b37 feat(proxy): add upstream forwarding
• 6116601 feat(proxy): dual-stack loopback listeners
• 63d89bb feat(proxy): enforce Host allowlist and control-API auth
• 53b2de4 feat(proxy): wire content plugin pipeline into request/response flow
• 84fff72 feat(redact): add built-in detector plugins
• 2d52a9d feat(redact): add deterministic placeholder and inbound-only backfill
• 5b5f1f9 fix(platform): keep read-only test OS-agnostic before the override
• 032a24b fix(platform): make read-only-prefix test separator-correct across OS
• a710042 fix(release): embed the full git tag as the CLI version
• 2fd0414 test(audit): complete HMAC chain tamper matrix
• 7e313d8 test(cli): make fail-closed invariant deterministic across OSes
• 0cc743a test(e2e): three-OS gateway smoke test
• 21d944b test(extension): use non-secret-shaped fake literal in policy tests
• 69391fd test(platform): cover cross-platform path and keyring edges
• 216e168 test(security): lock hard invariants with named tests

---

Install: brew install --cask fregie/tap/tokenhush (macOS),
scoop install tokenhush (Windows), or the install.sh script (Linux).