v0.5.0

Wardline v0.5.0 — first tagged release.

Wardline is a control-plane proxy that sits between AI agents and the MCP servers they call, enforcing identity, policy, budget, and audit.

Highlights

• OPA policy backend — Rego-based policy evaluation as an alternative to the built-in YAML rules engine, selectable via policy_backend: opa.
• Budget enforcement — per-identity request-rate throttling (budget.requests_per_window / window_seconds), composes correctly with either policy backend.
• OpenTelemetry tracing — every proxied request emits a span with the routing decision, exportable via OTLP.
• Web UI dashboard — a read-only ops SPA (features.web_ui) showing a live audit stream, policy state, and system status, served directly off the Wardline binary.
• Framework integration docs — verified guides for MCP clients, LangChain, LlamaIndex, the OpenAI Agents SDK, and CrewAI, including real, tested denial/error-handling behavior for each.
• Postgres-backed audit storage — durable audit persistence (features.postgres_storage) alongside the existing stdout/file writer.
• Helm chart — a production-ready chart (charts/wardline) with a multi-stage Dockerfile, restricted-PodSecurity-Standards-compliant securityContext, config/policy checksum annotations forcing rollout on change, and TCP-socket health probes.
• MCP protocol pass-through: the proxy now speaks the full JSON-RPC handshake (initialize, notifications/initialized), not just tools/call, unblocking real MCP client compatibility.

Verified end-to-end

All five optional features (OPA, budget, tracing, dashboard, Postgres storage) are proven to compose correctly in a single process via TestServeEndToEnd_AllFeaturesCombined — exercising allow, throttle, and deny paths together and confirming every sink (Postgres, the dashboard's live feed, the OTLP exporter) receives consistent events from the same request lifecycle.