v1.3.2

Release v1.3.2 — maintenance + distribution

v1.3.1

v1.3.1 — One-line installer for fresh hosts

v1.3.0

v1.3.0 — Address agent feedback from LQWDClaw v2 testing

v1.2.0

v1.2.0 — LQWD-AI-Grid default + docs alignment

v1.1.0

SaturnZap 1.1.0 — LSP integration polish

v1.0.2

v1.0.2

v1.0.1 — Audit remediation and public-repo readiness

1.0.1 — Audit remediation and public-repo readiness

Security hardening, audit remediation, and public-repo readiness.

Security

• systemd secrets: passphrase now lives in /etc/saturnzap/saturnzap.env (mode 0600) and is referenced via EnvironmentFile=. The unit file itself contains no secrets.
• Mainnet confirmation gate on sz fetch matches sz pay / sz keysend / sz send.
• Default spending cap on sz fetch via SZ_CLI_MAX_SPEND_SATS.
• Passphrase minimum length: 12 characters on sz init.
• Backup integrity validation on sz restore (mnemonic word count, schema, types).

Reliability

• MCP error handling: all 25 MCP tools return structured JSON errors instead of crashing.
• Channel open resilience: polling loop replaces fixed sleep; log parsing is exception-safe.
• Test isolation: singleton reset fixture eliminates state leakage.

CLI

• sz --version flag.
• --yes / -y flag on sz fetch.

Documentation & Release

• SECURITY.md with private disclosure policy.
• Aligned counts across all docs: 25 MCP tools, 23 IPC methods, 415 tests.
• Dependabot config and CodeQL workflow.
• Private infrastructure IPs replaced with RFC 5737 example addresses in tracked docs.

Full changelog: https://github.com/ShoneAnstey/SaturnZap/blob/main/CHANGELOG.md