v1.0.0-rc.1

1.0.0-rc.1

First release candidate for the five Knightfall.Envoy.ControlPlane packages on .NET 10: Protocol, Validation.Annotations, Core, ASP.NET Core hosting and the explicit optional Validation evaluator. Assembly names, C# namespaces and protobuf identities are retained.

The selected root surface includes SnapshotCache/LinearCache/MuxCache, SotW/Delta/ADS, optional ordered SotW ADS, callbacks, all 30 selected gRPC methods, nine Fetch methods, eight opt-in HTTP gateway routes, resource/reference/Struct helpers and a focused SotW ADS client. Validation remains separate from cache publication and from Core/hosting dependencies.

Optional validation has finite pinned-catalog coverage: 59 populated PGV paths / 86 combinations, 310 real field boundaries, 68 whole-message Go expectations, 373 selected PGV fixtures and 2,748 stable Protovalidate cases. Four NaN range differences intentionally reject in .NET while Go accepts. Seven relative-clock cases and 680 PGV fixtures outside the selected inventory are declared exclusions. Any payloads remain opaque unless callers explicitly decode them. Error wording/order and arbitrary-schema equivalence are not promised.

The live proxy matrix covers Envoy 1.40.1 on Linux amd64/arm64. Default SotW CDS heartbeat removal remains an upstream/proxy limitation; explicit Delta TTL refresh/expiry is separately proven. Broader contrib/legacy schemas and the standalone matcher remain deferred. See the repository's compatibility and T26 reports for exact pins, ownership and scope.

Release assets include packages and symbols, validated build/source-input SBOMs, source and generation locks, package digests and verification evidence. Provenance and SBOM attestations are recorded on GitHub. NuGet repository signing adds a signature to downloaded packages; external verification compares every other ZIP entry with the attested upload and validates that signature. GitHub Packages receives the same verified upload payloads.