v0.11.0

• docs(changelog): roll unreleased entries into 0.11.0 (#212) (314238e)
• feat(budgets): add CSV export for the spend ledger (#211) (ac042b3)
• feat(config): print the watching line from the watcher's ready hook (#209) (44db3e6)
• ci(docs): order-check the init scaffold in the config-samples guard (#208) (cae0339)
• fix(config): reject unknown keys in all nested config sections (#207) (f85b088)
• build(deps): clear the three new high audit advisories (#206) (ac850f8)
• build(deps): patch the react-router high advisory (#202) (681bb20)
• fix(sideband): finalize committed expiries under the latched audit id (#200) (16ceba4)
• fix(config): reject dashboard-routed rule approvals with dashboard off (#199) (dcf242e)
• build(deps): patch fast-uri and postcss high advisories (#197) (d392ec6)
• feat(budgets)!: match contributors on argument values (#196) (e84248d)
• fix(sideband): simulate rule rate and spend limits in dry-run (#193) (c8528ad)
• test(cli): replace wall-clock waits with condition-based waiting (#190) (a2debb7)
• build(deps): patch js-yaml, axios, and brace-expansion high advisories (#189) (d62217e)
• docs(policies): document retryable denial payloads and rename rule spend buckets (#187) (71ba33d)
• fix(config): align schema field order and shipped examples with the canonical order (#186) (a95cee9)
• feat(cli): add budgets to the init scaffold and quickstart configs (#184) (323475d)
• ci(docs): validate every shipped config sample against the real schema (#183) (62e3525)
• fix(config): reject unknown top-level keys in helio.yaml (#181) (67e13dd)
• docs: nest every copyable rule snippet under policies.rules (#180) (9fbf7f5)
• build(pnpm): upgrade to pnpm 11 to restore the dependency audit (#173) (3565e05)
• refactor(policy): remove the deprecated ruleIndex self-repair alias (#172) (a502096)
• docs: call the feature cross-tool spend budgets, and make the samples run (#169) (1bb6aa3)
• docs(readme): say what Helio enforces, not what it tracks (#166) (801fb24)

v0.10.0

• test(cli): wait for the asserted line in the config-watcher tests (#161) (dbe60fe)
• docs(changelog): roll unreleased entries into 0.10.0 (#160) (c290bc0)
• docs(budgets): budget guide, example, and demo walkthrough (#158) (40cd2a1)
• feat(dashboard): budgets view with live depletion and spend ledger (#157) (df3468d)
• feat(budgets): break-glass approvals for budget overages (#154) (5211464)
• feat(budgets): persist spend to a ledger and replay on restart (#151) (de3e173)
• feat(budgets): named cross-tool budgets with deny enforcement (#145) (5d87cab)
• fix(policy): discriminate spend buckets by rule and dual-key rule_index (#143) (4c08898)
• fix(policy): reject and audit nameless tools/call requests (#140) (bca413f)
• fix(sideband): return rule feedback on require_approval and dry_run (#139) (c52e998)

v0.9.0

• docs(changelog): roll unreleased entries into 0.9.0 (#138) (59f1b67)
• fix(audit): include record_kind, origin, and metadata in CSV exports (#137) (ab7637b)
• fix(audit): honor the 10,000-record export cap end to end (#134) (bcc015c)
• docs(audit): correct audit trail reference against the code (#133) (39154b5)
• fix(cli): stop echoing operator-provided sideband tokens to stderr (#130) (a633275)
• feat(sideband): record adapter liveness and surface GET /api/adapters (#129) (30a240b)
• docs(adapter-api): correct API reference against the code (#125) (29df192)

v0.8.0

• docs(changelog): roll unreleased entries into 0.8.0 (#122) (6f9d147)
• fix(dashboard): validate CORS origins as private IPv4 literals (#121) (4ca8329)
• fix(sideband): return JSON 500s for unhandled errors (#117) (f1e8ab2)
• docs(sideband-api): correct API reference against the code (#116) (a34af01)
• feat(audit): record denial reasons and escalation on approval records (#114) (17313e1)
• docs(approvals): correct audit-trail claims and fill API gaps (#113) (5183d2a)
• docs(policies): note full self-repair fields and neq edge case (#108) (bdf4bb8)
• docs(configuration): correct config reference against the code (#107) (9fe78bf)
• fix(docker): make the demo's approval flow actually fire (#106) (5fbdfa2)
• docs(sidecar): clarify purpose and fix config + dev-container accuracy (#105) (159061a)
• ci(release): publish the docker image for linux/amd64 and linux/arm64 (#103) (4341e90)
• docs(sidecar): note the image is amd64-only on Apple Silicon (#102) (945629b)
• docs(changelog): note the docker quickstart and dashboard login changes (#100) (6adb31d)
• test(ci): smoke-test the docker compose demo stack (#98) (4ec390b)
• fix(dashboard): make login-secret copy deployment-neutral (#97) (3b42e8e)
• docs(docker): harden the quickstart and reorder the demo config (#96) (a8a139f)

v0.7.0

• docs(changelog): cut the 0.7.0 release section (#92) (0c5bbcf)
• test(cli): add E2E coverage for unset secret refs and require_approval resolution (#91) (e467c3f)
• docs(quickstart): clarify dashboard login, SDK-token scope, and how to open the config (#90) (d96b4de)
• docs(config): standardize config section order on the request lifecycle (#89) (879a38f)
• docs(quickstart): add a zero-dependency upstream and agent-free testing paths (#88) (e3df041)
• docs(changelog): record the audit-only startup change under Unreleased (#87) (4c74f0f)
• feat(proxy): surface audit-only (allow-all) default at startup and in docs (#86) (37ef6fc)
• chore(ci): decouple the supply-chain audit from unrelated PRs (#77) (8b4c74a)

v0.6.0

• docs: add changelog entry for v0.6.0 (#76) (b967051)
• feat(proxy): optional evidence payload on POST /audit (#11) (#72) (507b036)
• chore(security): patch hono CORS advisory; scope-ignore dev-only undici advisory (#73) (fe11b0a)

v0.5.0

• docs: add changelog entry for v0.5.0 (#70) (0714056)
• feat(dashboard): render adapter-origin tool calls (#67) (525f6eb)
• chore(security): patch form-data, ignore dev-only vite advisory (#68) (0955589)
• feat(proxy): context-aware policy primitives (#13) (#65) (19a367a)
• feat(proxy): sideband governance API for hook-based adapters (#12) (#62) (e1788f3)
• chore(security): ignore dev-only esbuild advisory GHSA-gv7w-rqvm-qjhr (#63) (28c89eb)

v0.4.0

• docs: add changelog entry for v0.4.0 (#61) (b5ebe2f)
• feat(proxy): tool definition drift detection (on_tool_drift) (#25) (#59) (92db2ef)

v0.3.0

• docs: add changelog entry for v0.3.0 (#57) (5f319a6)
• fix(proxy): implement session-aware streamable-http upstream client (#56) (5b59820)

v0.2.0

• docs: add changelog entries for v0.1.1 and v0.2.0 (#55) (4f0e4e5)
• feat(proxy): static upstream request headers (upstream.headers) (#54) (4fd71bc)
• docs: align Quick Start with init and note single-upstream limit (#53) (969f163)