v2.3.0

Highlights

• MCP initialize + Mcp-Session-Id lifecycle
• SSE JSON-RPC parsing for Streamable HTTP tools/call
• Cancellation + optional capability digest binding
• Richer audit-tool evidence (session, capability, request ids)

Verify

• CI green on #67
• Release workflow runs real Control Plane e2e matrix before publish

v2.2.0

Highlights

• Signed verification_token on /v1/runtime/verify + public /v1/runtime/jwks
• Verify observed / correlation (generation + digests) for GitOps close-loop
• Nightly HA e2e: Postgres + dual Control Plane + dual Runtime + Redis + OIDC
• HA proofs: cross-CP approval redemption, tenant isolation, SIGTERM during stream

Verify

• CI green on #66
• Release workflow runs real Control Plane e2e matrix before publish

v2.1.0

Highlights

• Background usage webhook retry worker with exponential backoff
• Deterministic idempotent event_id
• Shutdown drain for pending usage events
• Streaming SSE usage extraction + usage events on stream finalize
• Buffer depth / delivery lag / drop metrics

Verify

• CI green on #65
• Release workflow runs real Control Plane e2e matrix before publish

v2.0.1

Correctness and contract honesty

• Admission cancel leak fixed
• Signed decision bound to local request digest + cached JWKS
• MCP requires Control Plane (unless MCP_ALLOW_UNGOVERNED)
• Runtime RBAC for status/verify/MCP servers
• Release gates CP 2.0.0 + 1.3.0; OCI Helm chart cosign-signed

Image: ghcr.io/justrunme/ai-runtime-platform:2.0.1

v2.0.0

Stable closed-loop contract

Runtime 2.0 freezes the Execution Plane surface:

Authenticate → Ask Control Plane → Route → Execute → Observe → Prove

• Evidence headers + decision correlation
• /v1/runtime/status + /v1/runtime/verify
• Tenant isolation + resilience
• MCP Streamable HTTP execution
• Usage events for chargeback

Image: ghcr.io/justrunme/ai-runtime-platform:2.0.0

See docs/closed-loop-contract.md.

v1.9.0

Usage events

• OTEL ai.runtime.usage.* attributes
• Optional webhook with idempotency key

Image: ghcr.io/justrunme/ai-runtime-platform:1.9.0

See docs/usage-events.md.

v1.8.0

MCP execution

• Streamable HTTP tools/call after Control Plane evaluate-tool
• MCP_SERVER_REGISTRY + env: credential refs

Image: ghcr.io/justrunme/ai-runtime-platform:1.8.0

See docs/mcp-execution.md.

v1.7.0

Resilience

• Global load-shed admission
• Circuit breaker + retry budget
• Graceful drain on SIGTERM (/readyz → draining)

Image: ghcr.io/justrunme/ai-runtime-platform:1.7.0

See docs/resilience.md.

v1.6.0

Tenant isolation

• Tenant-scoped decisions (arp:{tenant}:decision:{id})
• JWT-only tenant identity; auditor bypass for decision read
• TENANT_RUNTIME_POLICY allowlists + concurrency/queue admission (429)

Image: ghcr.io/justrunme/ai-runtime-platform:1.6.0

See docs/tenant-isolation.md.

v1.5.0

Runtime status / verify

• GET /v1/runtime/status — config digest, generation, routes, backends, last-seen policy
• POST /v1/runtime/verify — GitOps remediation close-loop

Image: ghcr.io/justrunme/ai-runtime-platform:1.5.0

See docs/runtime-status.md.