AxonFlow v11.3.0

v11.3.0 adds the safe-off foundations for paid Hosted Starter, strengthens tenant isolation, and restores reproducible clean-host Community installs.

Highlights

Adds paid-first Hosted billing routes and stable payment-required responses across Agent, HTTP, SDK, plugin, and MCP request paths. Paid enforcement remains disabled by default.
Forces row-level security across customer audit, policy, plan, workflow, evidence, usage, webhook, context, execution, and deletion data. Hosted startup now refuses traffic if the required roles, grants, policies, or forced-RLS census drift.
Makes Stripe entitlement changes monotonic and tenant bound, including signature freshness, event ordering, payment lineage, and paid-period comparisons.
Replaces unavailable historical MinIO container tags with checksum-pinned, multi-architecture source builds so clean Community installs remain reproducible.
Updates release dependencies and runtime images, including Go 1.26.10, Prometheus 3.15.1, patched gRPC and Go networking packages, and a minimized Grafana 13.3.0 image.
Adds the production-shaped Community SaaS staging topology needed for paid and unpaid end-to-end validation.

Apply Community SaaS migrations 189 through 196 and core migration 191 before enabling any paid cohort.
Keep the paid gate off, the cohort at zero, and acceptance and module capability values empty until the staging, RLS, Stripe, rollback, and canary gates pass.
SDK recommendations are unchanged: 9.5.0 for Go, Python, TypeScript, and Java, and 0.12.0 for Rust.

See the full changelog for details.