v0.6.0

What's Changed

• docs: scrub CONTRIBUTING.md and CHANGELOG.md for public visibility by @miladaslaner in #150
• chore: final public-readiness polish by @miladaslaner in #151
• fix: use personal email in CODE_OF_CONDUCT and SECURITY by @miladaslaner in #152
• docs: tone down governance files for side project by @miladaslaner in #153
• docs: add CHANGELOG entry for v0.6.0 by @miladaslaner in #154
• fix(engine): deflake 1k EPS duration-bound test on CI runners by @miladaslaner in #155

Full Changelog: v0.5.2...v0.6.0

v0.5.2

Security

• Confine handleRunStart config/scenario paths — the /api/run/start endpoint now restricts config and scenario paths to their respective directories via sanitizeConfigFilename + filepath.Join, matching all other file-handling endpoints. Previously accepted arbitrary filesystem paths.
• Normalize Packs tab esc() function — add single-quote escaping to match all other esc() implementations in app.js.

See CHANGELOG.md for details.

v0.5.1

Fixed

• Graceful shutdown for serve command — drains in-flight requests on SIGINT/SIGTERM with configurable timeouts (IB-95)
• Timestamps validation at load — malformed anchor, step, jitter, timezone, and business-hours values rejected at parse time (IB-100)
• Template validator enforcement — checkIdentifier now rejects unregistered generators at the AST leaf level, closing a FuncMap allowlist bypass (IB-91)

Changed

• Go toolchain 1.25.12 -> 1.26.3 (clears 7 stdlib CVEs)

Verified

Full E2E against a live LPHC collector: zero failures, zero 429s.

See CHANGELOG.md for details.

v0.5.0

BREAKING CHANGE: Report schema 1.2 -> 2.0

The effective_config block in JSON reports now emits snake_case keys (e.g. schema_version, target_eps) instead of the previous PascalCase (SchemaVersion, TargetEPS). Any tooling that parses report JSON must update its key references. The schema_version field reads "2.0".

Highlights

• 7 QA gate findings closed (F-01 through F-07): source pack realism fixes across firewall.traffic, aws.cloudtrail, paloalto.traffic, and identity.okta; strict manifest parsing; config JSON tags
• Find-ceiling mode: binary-search ramp discovers the target's max sustainable EPS with bottleneck attribution (knee detection + verdict engine)
• Benchmark regression gate wired in CI: gates on allocs/op via benchstat against a committed baseline
• New generators: geo (correlated city/country pairs) and add (integer arithmetic for template fields)
• 20+ bug fixes across transport, pipeline, config, engine, TUI, and CLI
• Web UI: find-ceiling toggle, bottleneck verdict rendering, run-log detail selector, guided pack creation, ATT&CK picker, scenario presets

See CHANGELOG.md for the full list.

v0.4.1

What's Changed

• test(engine): de-flake throughput + observer timing assertions by @miladaslaner in #71
• chore(agency): add hydrated codebase digest + CLAUDE.md pointer by @miladaslaner in #72
• feat(web): persist completed run reports to disk (IB-3) by @miladaslaner in #73
• feat(serve): default --reports-dir to ./reports (still overridable) [IB-4] by @miladaslaner in #74
• feat(cli): run auto-writes its completed report to --reports-dir (IB-5) by @miladaslaner in #75
• feat(config): additive sized contract + schema 1.1 + configbuild Input expansion (IB-9) by @miladaslaner in #76
• feat(report): grade sized target vs achieved + schema 1.1 + opt-in --fail-on-miss by @miladaslaner in #77
• feat(configbuild): IB-10 adapter-aware auto-tune derivation on the shared seam by @miladaslaner in #78
• feat(drift): warn-only sizing drift detection at validate and run start (IB-13) by @miladaslaner in #79
• IB-12: CLI emit — size --emit-config and init --from-sizing with a required run-volume bound by @miladaslaner in #80
• feat(web): sizing-tab "Apply to config" handoff to a new config draft (IB-14) by @miladaslaner in #81
• chore(agency): re-hydrate codebase digest to anchor 133d70b (post-IB-7) by @miladaslaner in #82
• fix(web): remove placeholder environment pills from header (IB-8) by @miladaslaner in #83
• fix(web): IB-15 — leave stop editable on throughput-only sizing draft by @miladaslaner in #84
• fix(docs): drop unbuilt OS-keychain token-source claim (IB-16) by @miladaslaner in #85
• fix(docs): align enforced CI-gate claims with ci.yml + guard [IB-17] by @miladaslaner in #86
• fix(brand): scrub vendor name from neutral surfaces + widen guard (IB-18) by @miladaslaner in #87
• fix(engine): stop stop.after generation at the deadline (IB-19) by @miladaslaner in #88
• fix(config): reject generic-hec framing:single with batch.max_events>1 (IB-20) by @miladaslaner in #89
• test(engine): drop non-portable 5k EPS floor in DurationBound (IB-21) by @miladaslaner in #90

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed

• Web UI follow-up fixes (sizing, stuck indicators, profile, scenario layout, serve dirs) by @miladaslaner in #68
• Source-pack sample lines (expand rows + /api/source/sample) by @miladaslaner in #69
• Secret provisioning: secret CLI, --secrets-dir, /api/secret/*, Configs affordance by @miladaslaner in #70

Full Changelog: v0.3.0...v0.4.0

v0.3.0

What's Changed

• Rebuilt web UI + Scenarios builder by @miladaslaner in #67

Full Changelog: v0.2.0...v0.3.0

v0.2.0

What's Changed

• chore: untrack local-only planning & reference docs by @miladaslaner in #59
• docs(examples): LPHC HTTP + syslog configs and how-to by @miladaslaner in #60
• feat(sources): firewall.cef.syslog pack (CEF over RFC 5424 syslog) by @miladaslaner in #61
• feat: config builder — ingestbench init (syslog + HEC) [PR 1/2: core + CLI] by @miladaslaner in #62
• feat: config builder web UI — New config tab + /api/config/* [PR 2/2] by @miladaslaner in #63
• feat: runtime error surfacing & fail-fast (TLS/401/etc. visible + abort) by @miladaslaner in #64
• feat: web UI Configs management — list/edit/run/delete + UX by @miladaslaner in #65
• feat(web): TLS-verify checkbox in the Configs form by @miladaslaner in #66

Full Changelog: v0.1.1...v0.2.0

v0.1.1

What's Changed

• fix(sources): correct two schema-fidelity errors from the 360 audit by @miladaslaner in #55
• fix(engine): make four config parameters work as intended (360 audit) by @miladaslaner in #56
• fix: remaining 360-audit findings — ipv6, syslog auth, compression, docs by @miladaslaner in #57
• fix(config): remove the dead source.event_bytes parameter by @miladaslaner in #58

Full Changelog: v0.1.0...v0.1.1

v0.1.0

Full Changelog: https://github.com/miladaslaner/IngestBench/commits/v0.1.0