v2.3.0

Changelog

• cae4725: Merge feat/limitations-closure-v3: production-hardening pass (v2.3) (@kabirnarang-ux)
• bf93549: ci: automate CVE scanning and dependency updates (@kabirnarang-ux)
• 5bc18ad: docs(benchmarks): add HA load result (@kabirnarang-ux)
• 96dbad4: docs(benchmarks): add anomaly-detection attack-burst load result (@kabirnarang-ux)
• 0144544: docs(benchmarks): add dashboard concurrent-load result (@kabirnarang-ux)
• 9c95865: docs(benchmarks): add federation concurrent-load result (@kabirnarang-ux)
• b8f9dce: docs(benchmarks): add grpc-transport TLS-on load result (@kabirnarang-ux)
• e02a81d: docs(benchmarks): add job_budget, job_cost_budget, taint, approval load results (@kabirnarang-ux)
• 68e3f66: docs(benchmarks): add oidc/mtls load results and bugs found this pass (@kabirnarang-ux)
• 0a32d8e: docs(benchmarks): add otel_tracing overhead load result (@kabirnarang-ux)
• 1226f00: docs(benchmarks): add postgres_storage concurrent-load result (@kabirnarang-ux)
• 82f6e41: docs(benchmarks): add rbac load results (@kabirnarang-ux)
• 9c00d71: docs(benchmarks): add risk-combo load results (@kabirnarang-ux)
• a1f975b: docs(benchmarks): add scim filter-query and bulk-create load results (@kabirnarang-ux)
• 42801e9: docs(benchmarks): add soak-test result and bench/soak.sh reproduction note (@kabirnarang-ux)
• ea37e2a: docs(benchmarks): add tenant-override AND-semantics load result (@kabirnarang-ux)
• ef43819: docs(benchmarks): document the real sustained-throughput ceiling on this machine (@kabirnarang-ux)
• a5ba3c3: docs(benchmarks): final consolidation pass -- reorder RBAC rows, update summary (@kabirnarang-ux)
• 140d04c: docs(benchmarks): give prometheus_metrics the same gauntlet as everything else (@kabirnarang-ux)
• 54a68cd: docs(benchmarks): race-detector run against real concurrent load, 0 races found (@kabirnarang-ux)
• b08b5ea: docs(benchmarks): remove bug-narrative content from public docs (@kabirnarang-ux)
• c11b765: docs(benchmarks): trim per-fix bug narrative, keep results table only (@kabirnarang-ux)
• 49831a6: docs(benchmarks): verify infer-policy and policy-pack end to end (@kabirnarang-ux)
• 5825246: docs(dashboard): Blocked's Unblock silently 404s without features.rbac on (@kabirnarang-ux)
• 7ff7251: docs(dashboard): document CSRF posture (verified, no gap found) (@kabirnarang-ux)
• b1851ff: docs(deployment): add on-call runbook (@kabirnarang-ux)
• aa2200c: docs(deployment): document Postgres backup automation recipe (@kabirnarang-ux)
• 4d09743: docs(deployment): document backup/restore drill in runbook (@kabirnarang-ux)
• 1e20a68: docs(deployment): document rolling-upgrade/mixed-version compatibility drill (@kabirnarang-ux)
• 8e7c6f2: docs(federation): document that a failed publish tick is not retried (@kabirnarang-ux)
• 6e639fb: docs(rbac,scim): document that SCIM bindings are enforced but not listed on the dashboard (@kabirnarang-ux)
• 345a6a7: docs(site): fix broken link, advertise 9 real shipped features the marketing page never mentioned (@kabirnarang-ux)
• 6cf72d4: docs(sso,mtls-bootstrap): document mock-vs-real-IdP/SPIRE caveat (@kabirnarang-ux)
• 3e180a6: feat(anomaly): identity_churn HA persistence + CUSUM-over-churn-count (@kabirnarang-ux)
• 7a02934: feat(anomaly): recall benchmark + CUSUM drift detection + tenant-aggregate detection + fixes (#5) (@kabirnarang39)
• 1692c0c: feat(cmd): add optional WARDLINE_DEBUG_PPROF loopback debug endpoint (@kabirnarang-ux)
• c96852b: feat(credential): AWS KMS-backed signing keys (@kabirnarang-ux)
• 1ceee24: feat(credential): SPIFFE Workload API client for Wardline's own outbound identity (@kabirnarang-ux)
• 95c99f4: feat(dashboard): brand the login page with the real design system (@kabirnarang-ux)
• 4f140df: feat(dashboard): browser-native login flow (session cookie fallback) (@kabirnarang-ux)
• 33c42f0: feat(dashboard): cluster-wide live audit view via postgres_storage (@kabirnarang-ux)
• 34c96fd: feat(dashboard): fsnotify config-file watcher for auto-reload (@kabirnarang-ux)
• 11340a8: feat(dashboard): replace native confirm()/alert() with themed modals (@kabirnarang-ux)
• 09dacaa: feat(federation): tenant-scoped correlation, not just a filtered view (@kabirnarang-ux)
• c89af57: feat(lint): machine-enforce the Clean Architecture dependency rule (#4) (@kabirnarang39)
• 5e0771c: feat(observability): Prometheus metrics endpoint behind prometheus_metrics flag (@kabirnarang-ux)
• 73ae124: feat(scim): full SCIM 2.0 compliance -- filter grammar, bulk ops, discovery (@kabirnarang-ux)
• 11662e5: feat(sso): OIDC discovery-document fetching (@kabirnarang-ux)
• a8417f6: feat(sso): multi-IdP OIDC bootstrap with issuer-based routing (@kabirnarang-ux)
• f453619: fix(audit,anomaly): JSONL reader dropped entries sharing a boundary's wall-clock second (@kabirnarang-ux)
• 024ce94: fix(bench): remove stale oidc token file before regenerating it (@kabirnarang-ux)
• 8cb83ac: fix(bench): remove unused extraHeader param in sessionload's call helper (@kabirnarang-ux)
• 96738ba: fix(config): don't require credential.identities_file for oidc bootstrap (@kabirnarang-ux)
• 8f9c1b0: fix(credential): OIDC verification survives an IdP's own key rotation (@kabirnarang-ux)
• 2b66473: fix(credential): let a global revoke grant scope the tenant-ambiguous wildcard (@kabirnarang-ux)
• 766f1c5: fix(dashboard): 3 real bugs found via a live browser audit (@kabirnarang-ux)
• 7831a94: fix(dashboard): correct inverted Secure-cookie polarity on session login (@kabirnarang-ux)
• 46f8e93: fix(deps): patch known CVEs in Go toolchain, grpc, and x/text (@kabirnarang-ux)
• 72b57b2: fix(postgres): share ONE connection pool across every Postgres-backed feature (@kabirnarang-ux)
• 858c391: fix(proxy): don't buffer streaming (SSE) MCP responses before forwarding (@kabirnarang-ux)
• f17e13a: fix(scim): set Location header on User/Group create (RFC 7644 §3.3) (@kabirnarang-ux)
• fe41def: perf(proxy): fix ~5x throughput ceiling found by production-scale benchmarking (@kabirnarang-ux)
• 8720e2f: perf(scim): O(1) userName/displayName uniqueness check via secondary index (@kabirnarang-ux)
• a119a50: test(bench): HA load coverage -- 2 replicas sharing one Postgres pool (@kabirnarang-ux)
• 58e0c2f: test(bench): add 30-60min soak test watching memory/goroutines via pprof (@kabirnarang-ux)
• de8a882: test(bench): load coverage for federation publishing/correlating across two instances (@kabirnarang-ux)
• 685a48a: test(bench): load coverage for grpc_transport with TLS on (spiffe + mTLS to upstream) (@kabirnarang-ux)
• da6d9c6: test(bench): load coverage for job_budget, job_cost_budget, taint_tracking, approval_workflow (@kabirnarang-ux)
• 76d7df0: test(bench): load coverage for oidc and mtls credential-issuance bootstrap sources (@kabirnarang-ux)
• cc2d8ae: test(bench): load coverage for otel_tracing span export overhead (@kabirnarang-ux)
• b6d18ce: test(bench): load coverage for postgres_storage under concurrent multi-feature writes (@kabirnarang-ux)
• fe72ef7: test(bench): load coverage for rbac role-binding-gated authorization (@kabirnarang-ux)
• fc4e801: test(bench): load coverage for scim Bulk operations and filter queries (@kabirnarang-ux)
• db4ce51: test(bench): load coverage for web_ui dashboard API under concurrent load (@kabirnarang-ux)
• 6e3fc4a: test(bench): real attack-shaped load coverage for anomaly_detection auto_block (@kabirnarang-ux)
• 8b24274: test(bench): risk-based flag-combination load tests (3 combos) (@kabirnarang-ux)
• b7c6c56: test(budget): E2E + load coverage for tenant-override AND-semantics (@kabirnarang-ux)
• ad162ec: test(credential): confirm OIDC verification rejects alg:none and HS256/RSA-key confusion (@kabirnarang-ux)
• e3f4f9e: test(e2e): cover malformed-JSON-body edge case for v0.1 baseline hot path (@kabirnarang-ux)
• 8ac88ad: test(e2e): cover oidc bootstrap source end to end against a real server (@kabirnarang-ux)
• d8033ee: test(e2e): cover scim Bulk operations and filter queries against a real server (@kabirnarang-ux)
• 5d6aa8a: test(policy): fuzz Cedar and OPA/Rego policy parsers (@kabirnarang-ux)