Release v0.17.0

What's Changed

0.17.0 (2026-02-09)

Features

• 24-01: create SignalAnchor types and schema (49aa933)
• 24-01: implement dashboard quality scorer (120a084)
• 24-01: implement layered signal classifier (bcee61e)
• 24-02: implement K8s workload linker with label priority (48eee9c)
• 24-02: implement signal extractor with multi-role support (1babed5)
• 24-03: add BuildSignalGraph with MERGE upsert (53152be)
• 24-03: hook signal extraction into DashboardSyncer (210c4fb)
• 25-01: add SignalBaseline type and RollingStats computation (10e2d93)
• 25-02: implement hybrid anomaly scoring (0917225)
• 25-03: implement BaselineCollector periodic syncer (b3edd5d)
• 25-03: implement SignalBaseline graph storage (072d715)
• 25-04: implement BackfillService for historical baseline (845526f)
• 25-04: implement hierarchical anomaly aggregation (8a32b2e)
• 25-05: wire BaselineCollector into Grafana integration lifecycle (20d082f)
• 26-01: implement ObservatoryService core (6c220d1)
• 26-02: implement ObservatoryInvestigateService (1cf5790)
• 26-03: implement ObservatoryEvidenceService (067d50c)
• 26-04: implement observatory_changes tool (de5f3a1)
• 26-04: implement observatory_status tool (505dedc)
• 26-05: implement ObservatoryScopeTool for Narrow stage (973d34f)
• 26-05: implement ObservatorySignalsTool for workload signals (f2f5b12)
• 26-06: implement ObservatoryCompareTool (751ed56)
• 26-06: implement ObservatorySignalDetailTool (1b0b3c7)
• 26-07: implement observatory_evidence tool (0923435)
• 26-07: implement observatory_explain tool (b16248a)
• 26-08: create RegisterObservatoryTools function (e4e0524)
• 26-08: wire observatory services into Grafana integration lifecycle (8ba7e72)
• grafana: add curated metrics sync for automatic SignalAnchor creation (1057243)
• grafana: add scrape target linking for SignalAnchor to workload resolution (29f2f28)
• grafana: add signal validation job for alert-signal correlation (54f2f52)
• grafana: link universal container metrics to all workloads (1132cb8)
• graph: optimize sync pipeline with state cache, label index, and batch queries (8b22903)
• observatory: add node type filter dropdown (98599fd)
• observatory: add Observatory page for signal visualization (7f2a879)
• observatory: embed curated metrics for signal classification (a5d4ac1)
• observatory: improve graph UX and fix workload relationship limits (bbe694e)
• ui: add namespace and workload dropdown filters to Observatory (7ef8a93)
• ui: add Observatory default node types setting and auto-fit (c8fd3bb)
• ui: feature gate Observatory and Integrations behind ?beta=true (648dec8)
• hide inactive replicas (9353e81)

Bug Fixes

• 26: revise plans based on checker feedback (ec9f12a)
• grafana: improve signal metric classification accuracy (8c53f74)
• add integration test (59db1ef)
• API trailing slash handling and FalkorDB persistence improvements (9090669)
• SignalValidationJob interface compatibility and Prometheus test (2fccc0b)
• chart: FalkorDB graceful shutdown and persistence improvements (a777609)
• docs: link nav items and rename Integration to Incident Response (acf45be)
• docs: remove "Free" from Get Started button text (8cd8231)
• docs: remove Pricing nav link from documentation page (e85fb8f)
• grafana: FalkorDB query compatibility for boolean and IN clauses (6be2161)
• grafana: prevent duplicate SignalAnchors with composite uid MERGE (cd9ef0e)
• grafana: resolve datasource template variables for baseline collection (2c6d254)
• graph: handle NULL r.deleted on placeholder ResourceIdentity nodes (d77e39d)
• graph: include structural edges in Phase 2 batch processing (5d411d6)
• graph: use inline Cypher literals for batch queries to fix FalkorDB panic (38945b0)
• observatory: filter SignalAnchors by connected workload namespace (7065db5)
• observatory: skip edges for SignalAnchors not in limited result set (7936f01)
• tests: align sidebar test with two-layer layout implementation (ca08c81)
• tests: pin FalkorDB to v4.2.0 to fix integration test crashes (4fdcefe)
• ui: add loading and fallback states to Observatory page (57c45ed)
• ui: fix Observatory zoom behavior after fit-to-view (1f54f72)
• ui: initialize loading state to true in useObservatoryGraph hook (f2ca6a1)
• ui: prevent graph resize when sidebar expands on hover (5b59136)

Code Refactoring

• observatory: consolidate types and implement GetCurrentValue (501b011)
• observatory: extract multi-provider architecture (5995f29)

Tests

• 24-04: add signal ingestion end-to-end integration test (836e0e2)
• 25-01: add unit tests for rolling statistics computation (d58fde6)
• 25-02: add failing tests for anomaly scoring (0948894)
• 25-05: add end-to-end baseline integration tests (0d18570)
• 26-01: add unit tests for ObservatoryService (a2c7f5a)
• 26-02: add unit tests for ObservatoryInvestigateService (fe92661)
• 26-03: add unit tests for ObservatoryEvidenceService (4ff41ee)
• 26-04: add unit tests for Orient stage tools (184e6d4)
• 26-05: add unit tests for Narrow stage tools (3d994ab)
• 26-06: add unit tests for Investigate stage tools (31040d6)
• 26-07: add tests for observatory_explain and observatory_evidence tools (0f63ed0)
• 26-08: create observatory integration tests (6eacbc5)

Documentation

• create milestone v1.5 roadmap (3 phases) (184cf41)
• define milestone v1.5 requirements (b417a00)
• start milestone v1.5 Observatory (2e8fa2d)
• 24: capture phase context (0420177)
• 24: complete Data Model & Ingestion phase (9513a0b)
• 24: create phase plan (d82468a)
• 24: research phase domain (4d5521c)
• 24-01: complete signal types and classification plan (e40c8c6)
• 24-02: complete signal extraction and workload linkage plan (01b06f3)
• 24-03: complete signal graph integration plan (313d855)
• 24-04: complete signal ingestion integration test plan (03cfb48)
• 25: capture phase context (fbdbccf)
• 25: complete Baseline & Anomaly Detection phase (dfefb1f)
• 25: create phase plan for Baseline & Anomaly Detection (e88c1ff)
• 25: research baseline & anomaly detection phase (a0e62b6)
• 25-01: complete SignalBaseline type plan (f4e7b15)
• 25-02: complete hybrid anomaly scorer plan (f6b52df)
• 25-03: complete graph storage & forward collection plan (1b89ebc)
• 25-04: complete historical backfill & anomaly aggregation plan (ffbaec8)
• 25-05: complete integration test & lifecycle plan (25a0251)
• 26: capture phase context (66e3585)
• 26: complete Observatory API & MCP Tools phase (0673412)
• 26: create phase plan (fcba270)
• 26: research phase domain (a4d6617)
• 26-01: complete ObservatoryService core plan (f924b6c)
• 26-02: complete ObservatoryInvestigateService plan (785f819)
• 26-03: complete ObservatoryEvidenceService plan (6c0d531)
• 26-04: complete Orient stage tools plan (7a801a9)
• 26-05: complete Narrow stage MCP tools plan (3077052)
• 26-06: complete Investigate stage tools plan (43e064d)
• 26-07: complete Hypothesize and Verify stage tools plan (cf9e303)
• 26-08: complete Tool Registration & Lifecycle plan (5d3f2e8)

Container Images

docker pull ghcr.io/moolen/spectre:0.17.0

Helm Chart

helm install spectre oci://ghcr.io/moolen/charts/spectre --version 0.17.0

What's Changed

• feat: grafana integration by @moolen in #48

Full Changelog: v0.16.1...v0.17.0