Skip to content

v0.20.0 — Governed Remote Adapter Writes

Choose a tag to compare

View all tags
@nvk nvk released this 16 Aug 12:11
· 52 commits to master since this release
v0.20.0
b513c70

What's New

  • Exact remote-resource policy — machine-local registrations can allowlist opaque remote resources without exposing them in normal adapter listings.
  • Declared remote effects — operations explicitly declare remote-read and/or remote-write.
  • Approval bound to an exact plan — remote writes require --approve-remote-write, a matching SHA-256 plan, expected revision, and stable idempotency key.
  • Verified private receipts — successful remote writes must return read-back verification; full receipts stay mode 0600 inside registered write roots while terminal reports remain content- and identifier-free.
  • Backward compatible — existing v0.19 private adapters without remote effects continue to run unchanged.
Assets 2
Loading