v0.2.1

Loom v0.2.1

Release-pipeline fixes that landed after the v0.2.0 tag, so that a plain tag
push produces a complete, verifiable release.

- The publish job checks out the repository before downloading artifacts; it
  previously failed on the missing artifact verification script after every
  artifact had already been built, signed, and attested.
- SHA256SUMS is attached to the release. scripts/install.sh fetches it and
  verifies the binary against it, so the documented installer could not
  succeed for any earlier release.
- The SBOM is checksummed and signed; the checksum and signature jobs
  previously ran without it.
- container-scan no longer filters its push trigger by path, so a release
  commit that touches only VERSION and documentation still satisfies the
  release gate.
- The Python, TypeScript, and Rust SDK User-Agent strings track the release
  version again.

The v0.2.0 tag is unchanged.

v0.2.0

Loom v0.2.0

Breaking:
- loom audit rotate requires --checkpoint and LOOM_AUDIT_CHECKPOINT_KEY_PREVIOUS,
  and verifies the prior checkpoint under the retired key before re-signing.
- runtime.Metrics.ObserveRecovery is split into ObserveRecoveryQueue and
  ObserveRecoveryProgress.
- oidc.NewVerifier fetches the JWKS during construction, so an unreachable key
  endpoint fails at startup.

Added: loom audit verify-checkpoint, loom audit export --stream for the durable
PostgreSQL audit stream, and bootstrap.Config.ReadyChecks with
oidc.Verifier.ReadyCheck.

Fixed: durable-store and recovery metrics were exported but never written;
loom_execute_duration_seconds was missing _sum; /readyz ignored an
application-supplied identity verifier; and PostgreSQL audit export could not
verify a chain written on a platform with a nanosecond clock.

v0.1.8

Loom v0.1.8

v0.1.7

Release v0.1.7

v0.1.6

Release v0.1.6

v0.1.5

Loom v0.1.5

v0.1.4

Release v0.1.4

Loom v0.1.3

What's Changed

• Prepare Loom v0.1.1 public release by @loreste in #1
• Harden security pipeline and enforce tenant isolation by @loreste in #2
• Harden runtime and add SDK support by @loreste in #3

New Contributors

• @loreste made their first contribution in #1

Full Changelog: v0.1.2...v0.1.3

v0.1.2

Loom v0.1.2 security and tenancy hardening

v0.1.1

Loom v0.1.1 public release