Skip to content

v1.4.1 — Harden the gate

Choose a tag to compare

View all tags
@maksym-mishchenko maksym-mishchenko released this 14 Jun 23:56
v1.4.1
This tag was signed with the committer’s verified signature.
maksym-mishchenko Maksym
SSH Key Fingerprint: 5cWs6pLUZqz1nsQ1cliBgrToVFXg7IhcUV3bRhC2STk
Verified
Learn about vigilant mode.
0d2c1d5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v1.4.1 — Harden the gate

Patch release for the showcase hardening pass.

Added

  • Runtime audit signing with --audit-key / MCPGATE_AUDIT_KEY_FILE.
  • File-backed dashboard tokens with --token-file / MCPGATE_TOKEN_FILE.
  • Server response bounds for HTTP transports and proxied MCP responses.

Changed

  • Keyed audit verification now fails closed for missing signatures, non-contiguous sequences, and forged non-bootstrap GENESIS rows.
  • Policy constraints preserve typed JSON arguments instead of flattening values.

Fixed

  • Dashboard pending approval rendering no longer uses inline event handlers for untrusted request IDs.
Assets 2
Loading