v0.5.0

0.5.0 (2026-08-04)

Added

• core: bounded denied-flow observation + EKS acceptance runbook (b0ddb5d)
• core: network grant domain, authorization pause, Cilium spike findings (1145e6e)
• Enterprise Recipes — versioned templates that stamp governed automations (dcacd9b)
• governed sandbox network access (d006881)
• k8s: actually program the per-run network policy at provision (29fa915)
• k8s: Cilium enforcer + verify() at provision (d491bc1)
• k8s: Cilium provider seam, per-run policy lowering, chart-static wall (9d9c2ac)
• k8s: implement the Cilium enforcer and invoke verify() at provision (7df0baf)
• server: resolve, park, and revoke sandbox network grants (96def7a)

Documentation

• network-grant runbook, design doc, threat-model residuals, claim fixes (d317ade)