v1.2.11: Kubernetes-Native GRC Dispatcher & OOM Resilience Fix

🚀 What's New

Kubernetes-Native GRC Dispatcher

We've introduced a robust, non-blocking asynchronous transport layer to stream PII redaction and Tool-Call RBAC decision logs directly to GRC platforms (Vanta, Drata, Sprinto) and SIEMs without impacting the Data Plane's critical <1ms SSE streaming latency.

• AsyncWebhookTransport: Supports fire-and-forget HTTP webhooks for direct evidence ingestion into compliance platforms. Re-uses httpx connection pools to prevent socket exhaustion at high concurrency.
• SidecarFileTransport: Append-only WORM file writer optimized for fluentd/promtail logging stacks native to Kubernetes sidecar patterns.

🐛 Bug Fixes & Stability

• Memory Resilience (OOM Fix): Resolved a memory leak in the Trace Exporter during high concurrent streaming load. The proxy now aggressively conforms to its <55MB RAM footprint, even under Docker/K8s cgroup hard limits (--memory="55m"), by dropping excessive async task overhead and correctly managing garbage collection of completed transport events.
• InMemoryPolicyResolver Fallback: Ensured high availability of the Pluggable Tool-Call RBAC engine by adding a resilient in-memory fallback strategy if the primary Redis/OPA/Vault cluster becomes temporarily unavailable.
• Documentation Updates: Improved internal navigation by hyperlinking all Enterprise Flagship Features in the README.md to their corresponding architectural, security, and compliance deep dives.

Full Changelog: v1.2.9...v1.2.11