v1.2.0

1.2.0 (2026-08-11)

Features

• managed-observe: report Claude Code hook health with every heartbeat (#460) (eba60aa)

v1.1.1

1.1.1 (2026-08-10)

Bug Fixes

• setup: let kontext setup re-run against the active profile (#458) (9608939)

v1.1.0

1.1.0 (2026-08-10)

Features

• profile: switch workspaces and backends without reinstalling (#446) (1f2fe59)

Bug Fixes

• endpointconfig: tolerate weak ETags and log refresh failures (#454) (48e859a)

v1.0.1

1.0.1 (2026-08-05)

Bug Fixes

• daemon: answer decision hooks before annotation and persistence (#450) (6ba6c39)

v1.0.0

1.0.0 (2026-08-04)

⚠ BREAKING CHANGES

• retire legacy managed sessions (#440)

Features

• compute the risk annotation in the decision path and upload it (#428) (2eb0fc9)
• config: negotiate endpoint-config v2 and honour the guardrail switch (#433) (d1cbf28)
• doctor: identify builds by source revision, not version string (#435) (d106002)
• doctor: report core setup health (#441) (e4711d8)
• guard: run the guardrail LLM in the managed daemon too (#436) (fa23eb6)
• observe-mode bash risk classifier (SVM + local guardrail LLM) (#414) (f1a1904)
• retire legacy managed sessions (#440) (f5be064)
• setup: make the local risk model an optional setup step (#444) (938bd18)
• single guardrail LLM (stock Qwen3-0.6B, V2 prompt) replacing the JSON judge (#423) (f7be605)

Bug Fixes

• managed: survive a mode the running build does not implement (#434) (3f4e33a)

v0.16.0

0.16.0 (2026-07-29)

Features

• add staging brew channel for testing branches against the staging backend (#395) (d2400bc)
• config: sync endpoint configuration independently (#387) (69d72f5)
• ledger: add Decision Fact v1 contract mirror and golden corpus (#416) (9b96cb0)
• ledger: build the decision fact from evaluation outcomes (#417) (7b7847b)
• policy: add Go Cedar decision conformance (#383) (eab6639)
• policy: add Go Cedar evaluator conformance (#382) (3184f5d)
• policy: cache native Cedar deployments (#384) (e6d02c2)
• policy: gate Cedar enforcement cutover (#386) (0ea3fd0)
• policy: observe local Cedar decisions (#385) (02d90ec)
• policy: resolve enforcement from remote rollout mode (#412) (063cf95)
• setup: default self-serve installs to remote mode (#413) (7fc4166)

Bug Fixes

• guard: keep local policy evaluation advisory (#421) (a85d4b1)
• guard: redact command summaries with the shared payloadcapture ruleset (#377) (bdec9e5)
• ledger: bind decision facts into signed receipts (#418) (c1b3939)
• payloadcapture: sync rules/2 review fixes from kontext#655 (#429) (3f80846)

v0.15.1

0.15.1 (2026-07-21)

Bug Fixes

• deps: bump vite to 7.3.5 and esbuild to 0.28.1 for open security alerts (#380) (7ae08ff)
• managed-observe stale-daemon recovery — binary watchdog, status breadcrumb, doctor + --fix (ENG-516) (#373) (eb92ea2)
• managedobserve: log consecutive stream flush failures unconditionally (#394) (068e945)
• managedstream: drain past wide receipt ranges, restore batch limit after reductions (#393) (7b77d80)
• sqlite: chunk ledger IN() queries and guard wide receipt rowid ranges (#392) (45a0f16)

v0.15.0

0.15.0 (2026-07-09)

Features

• add payload capture library (#365) (a4a4d59)
• apply org payload capture mode from the policy snapshot (#367) (c2e5034)
• hubspot provider policy — classifier, sync, dry-run + Cowork bash coverage (#364) (625db1e)
• record captured tool payloads in the local ledger (#366) (37e3fb1)

Bug Fixes

• build: bump Go to 1.25.12 for GO-2026-5856 (#370) (addf27d)

v0.14.1

0.14.1 (2026-07-08)

Bug Fixes

• managedstream: raise flush client timeout to 30s, env-tunable (ENG-514) (#368) (e38621f)

v0.14.0

0.14.0 (2026-07-07)

Features

• githubpolicy: snapshot v3 — group layer and endpoint directory identity (#347) (6e7bda3)
• managed: report device user_email in hosted batches (#346) (ff45775)

Bug Fixes

• daemon: ack non-blocking hooks before the ledger write (#362) (dad4e4d)
• managedstream: drain the full export backlog in one flush (#360) (f0e25a5)
• managedstream: hold the persisted export cursor back by a safety lag (#361) (ebb2cf1)