Changelog

<h1>ᚾ&nbsp;NornGate — Changelog</h1>

All notable documentation and product-facing changes are recorded here. The format follows Keep a Changelog; versioning follows Semantic Versioning.

---

ᛞ Conventions

• Version scheme (SemVer). MAJOR.MINOR.PATCH — MAJOR for a breaking product or API change, MINOR for new pages or features, PATCH for corrections that do not change meaning of an existing contract.
• Categories. Entries are grouped as Added, Changed, Fixed, Deprecated, Removed, Security — per Keep a Changelog.
• [Unreleased] holds merged-but-untagged changes; they roll into the next tagged version.
• Each entry links the page it affected so a reader can go straight to the current state.

---

[Unreleased]

Merged changes awaiting the next tag accrue here.

---

[0.1.0] — 2026-07-07

First tagged documentation release: the Welcome section refresh. Establishes a clear starting point and consistent navigation across the four Welcome pages.

Added

• Changelog — this page; tracks documentation and product-facing updates in one place.
• Iconography — Elder Futhark section glyphs across the wiki (semantic, not emoji), with a canonical legend on Home.

Changed

• Introduction — reworked for first-read clarity and navigation flow. The five-gate pipeline now renders as a committed SVG (GitHub wikis do not render Mermaid); the Mermaid source is retained in a collapsed block for editing.
• Quick Overview — expanded from a summary into a technical fast path: the gate table now names the auth mechanism (SPIFFE SVID) and HTTP denial semantics (401/403/409/429), with a concrete 403 denial example and a use-case → gate mapping.
• Norse Cosmology & Platform Design — added architecture context ahead of the deeper sections: service-mesh internals (Istio/Envoy, the five gates as an ordered fail-closed WASM filter chain, SPIFFE/SPIRE, mandatory mTLS, egress control), the three-wells model, and a god → gate agent registry.

Fixed

• Ledger model — reconciled to one canonical description across all Welcome pages: Urd is a centralized, append-only, Ed25519-signed hash chain — tamper-evident, with PII payloads held separately and crypto-shreddable for erasure. Replaces the earlier bare "immutable" wording. See Security & Fail-closed.
• Determinism — clarified that a gate verdict is a pure function of (request, policy_snapshot, state_snapshot), not of the request alone; the earlier "same input always yields the same verdict" phrasing is corrected.
• Arbitration wording — a deterministic winner depends on the competing set and tie-break rule; noted that deterministic is not the same as fair.

Security

• Documented credential starvation and total mediation as the conditions under which the framework-agnostic guarantee holds (agents hold no raw credentials; no un-brokered sandbox egress). See Security & Fail-closed.

Renamed

• Completed the Valhalla AI → NornGate product rename across Welcome. Valhalla is retained as the valhalla.* archive realm; the valhalla-cli examples are now norngate-cli.

Why it matters. New readers reach the model faster; the four Welcome pages now cross-link into one path; and the architecture pages carry enough context before the deeper Core Concepts sections. Just as important, the ledger, determinism, and branding are now described identically everywhere — a reader who hits two pages sees one system, not two.

---

Iconography

Section glyphs are Elder Futhark runes (Unicode Runic block, U+16A0–U+16FF) — not emoji. Full set on Home:

Rune	Name	Gloss	Marks
ᚾ	Nauðiz	need, constraint	the platform mark
ᛞ	Dagaz	day, breakthrough, transformation	change / this log

References. Keep a Changelog 1.1.0 · Semantic Versioning 2.0.0. Naming doctrine: Prose Edda / Poetic Edda, per Norse Cosmology & Platform Design.

ᚾ NornGate — Changelog

All notable documentation and product-facing changes are recorded here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versioning follows [Semantic Versioning](https://semver.org/).

---

ᛞ Conventions

• Version scheme (SemVer). MAJOR.MINOR.PATCH — MAJOR for a breaking product or API change, MINOR for new pages or features, PATCH for corrections that do not change meaning of an existing contract.
• Categories. Entries are grouped as Added, Changed, Fixed, Deprecated, Removed, Security — per Keep a Changelog.
• [Unreleased] holds merged-but-untagged changes; they roll into the next tagged version.
• Each entry links the page it affected so a reader can go straight to the current state.

---

[Unreleased]

Merged changes awaiting the next tag accrue here.

---

[0.1.0] — 2026-07-07

First tagged documentation release: the Welcome section refresh. Establishes a clear starting point and consistent navigation across the four Welcome pages.

Added

• Changelog — this page; tracks documentation and product-facing updates in one place.
• Iconography — Elder Futhark section glyphs across the wiki (semantic, not emoji), with a canonical legend on [Home](Home#iconography).

Changed

• [Introduction](Introduction) — reworked for first-read clarity and navigation flow. The five-gate pipeline now renders as a committed SVG (GitHub wikis do not render Mermaid); the Mermaid source is retained in a collapsed block for editing.
• [Quick Overview](Quick-Overview) — expanded from a summary into a technical fast path: the gate table now names the auth mechanism (SPIFFE SVID) and HTTP denial semantics (401/403/409/429), with a concrete 403 denial example and a use-case → gate mapping.
• [Norse Cosmology & Platform Design](Norse-Cosmology-and-Platform-Design) — added architecture context ahead of the deeper sections: service-mesh internals (Istio/Envoy, the five gates as an ordered fail-closed WASM filter chain, SPIFFE/SPIRE, mandatory mTLS, egress control), the three-wells model, and a god → gate agent registry.

Fixed

• Ledger model — reconciled to one canonical description across all Welcome pages: Urd is a centralized, append-only, Ed25519-signed hash chain — tamper-evident, with PII payloads held separately and crypto-shreddable for erasure. Replaces the earlier bare "immutable" wording. See [Security & Fail-closed](Security-and-Fail-Closed).
• Determinism — clarified that a gate verdict is a pure function of (request, policy_snapshot, state_snapshot), not of the request alone; the earlier "same input always yields the same verdict" phrasing is corrected.
• Arbitration wording — a deterministic winner depends on the competing set and tie-break rule; noted that deterministic is not the same as fair.

Security

• Documented credential starvation and total mediation as the conditions under which the framework-agnostic guarantee holds (agents hold no raw credentials; no un-brokered sandbox egress). See [Security & Fail-closed](Security-and-Fail-Closed).

Renamed

• Completed the Valhalla AI → NornGate product rename across Welcome. Valhalla is retained as the valhalla.* archive realm; the valhalla-cli examples are now norngate-cli.

Why it matters. New readers reach the model faster; the four Welcome pages now cross-link into one path; and the architecture pages carry enough context before the deeper Core Concepts sections. Just as important, the ledger, determinism, and branding are now described identically everywhere — a reader who hits two pages sees one system, not two.

---

Iconography

Section glyphs are Elder Futhark runes (Unicode Runic block, U+16A0–U+16FF) — not emoji. Full set on [Home](Home#iconography):

Rune	Name	Gloss	Marks
ᚾ	Nauðiz	need, constraint	the platform mark
ᛞ	Dagaz	day, breakthrough, transformation	change / this log

References. [Keep a Changelog 1.1.0](https://keepachangelog.com/en/1.1.0/) · [Semantic Versioning 2.0.0](https://semver.org/). Naming doctrine: Prose Edda / Poetic Edda, per [Norse Cosmology & Platform Design](Norse-Cosmology-and-Platform-Design).