v0.5.1

jumpgate v0.5.1 is a security and cleanup release. To upgrade, replace the binary and the agent.

Security fixes

• Job records no longer store the intent payload. The job.created entry in a job's log used to carry the payload of the intent that created it. It now records no payload.
• The process check records only pid and name. node.migrate-names no longer writes a process's full command line into the job record.
• Both records were readable only by root on the box.

Other changes

• Removed duplicate checks, so each rule is checked in one place. The agent now verifies its own job log on load, by the digest chain.
• The server keeps a mark per job log instead of the verified entries.
• More tests cover the log checks' refusals and the agent's lease path.
• Docs now say that secrets never travel in job inputs.

Upgrading from v0.5.0

Replace the binary and the agent.