v0.7.0

0.7.0 (2026-08-13)

Added

• db: backfill the default policy into every tenant (0030) (f00fb91)
• db: backfill tiered policies into existing tenants (0029) (f8efc38)
• policy: add open, standard, and governed seed policy tiers (d3d6ab1)
• policy: rename the open tier to unrestricted (0031) (0246036)
• policy: tiered seed policies — unrestricted / standard / governed (7b4b088)
• web: make an agent's declared egress visible, and declarable at creation (44bc3f7)
• web: make an agent's declared egress visible, and declarable at creation (e417112)

Fixed

• cloud,web: cold-start enforcement deadline + collapse the grant card on Overview (1d6373e)
• cloud,web: cold-start enforcement deadline + E2E scenario matrix evidence (2f25b2f)
• doctor: repair the RLS check, which could never pass (0fc1383)
• doctor: repair the RLS check, which could never pass (ab98009)
• orgs: seed default and tiered policies when an org is created (0315de9)
• policy: close the governed shell hole and three review findings (509a42c)
• web: close the network-grant UI review findings (78adc96)
• web: close the network-grant UI review findings (10a7166)

Documentation

• cloud: cold-start regression test confirms the netpol deadline fix (9218025)
• cloud: live acceptance — a granted run reaches the internet (9fb474e)
• cloud: network-grant UI live acceptance evidence (94bcc6d)