v0.11.0 — first public release

First public release of Doberman — an adaptive authorization layer for coding agents.

pip install doberman-core

The distribution is doberman-core (the bare doberman name on PyPI belongs to an unrelated, abandoned project). The import name and CLI are unchanged: import doberman / doberman --help.

Included

• Tool mediation + decision engine — every tool call → allow / authenticate / block
• Objective guardrail: path confinement, destructive-command, external-destination, secret-pattern, and smuggled-token-channel rules
• Subjective guardrail: adaptive behavioral baselines + OOD/homoglyph token signals; universal subjective layer (SL1–SL9)
• Roles & boundaries, capability discovery, tiered auth (confirm → TOTP → scoped elevation)
• Local redacted audit log, policy-drift & poisoning defense, turn gate (pre-inference prompt-injection screening)
• Suite-agnostic ASR/FPR benchmark harness
• doberman serve stdio MCP proxy runtime

Apache-2.0 · standalone with no proprietary dependency (CI-enforced) · published via PyPI Trusted Publishing (OIDC).