Stanch v0.1.0 - initial public release

Stanch v0.1.0 - initial public release

The dead-man switch that acts. Stanch stops the bleeding when no one answers.

v0.1.0 ships the detection half of the product: heartbeats, business invariants, alerting and the append-only audit trail. Autonomous containment - the acts - is the core of v0.2 (ACK flow, missed-ACK autonomy, playbook execution engine) and is tracked in the README under In active development.

What ships

• Heartbeat aggregation API (POST /api/v1/heartbeat) with shared or per-source scoped tokens (constant-time comparison, fail-closed)
• Internal dead-man: versioned YAML staleness rules turn silent sources into alerts (severity P0-P3)
• meta_threshold rules on heartbeat metadata (shadow-capable)
• Anti-fatigue pipeline: dedupe by fingerprint, per-rule cooldown, auto-resolve on recovery, optional per-severity re-notification of open alerts
• Pluggable alert channels behind one interface: Telegram, WhatsApp (direct Meta Graph API, template mode for business-initiated alerts outside the 24h window), and a dummy channel for dev/tests
• Watch-the-watcher ping to a healthchecks.io-compatible URL, plus a daily health summary
• Read-only endpoints: alerts, source states, per-source dossier
• Append-only action_log audit trail
• Stop-action types (closed set) as stubs - the execution engine lands in v0.2, shadow-first
• Trinity pre-commit hook (code + test + doc in the same commit), gitleaks and an agnostic-core guard, all enforced in CI

Integrity

• 139 tests passing; ruff clean; gitleaks: no leaks across the full history