v1.0.0

Changelog

• b62c50d chore(release): prep v1.0.0 — Go 1.25 release build, version metadata
• 2ad7b9d feat(ha): multi-gateway peer mesh — shared fleet view + call forwarding
• 0ac448c feat(rbac): enforce fine-grained agent/tool scoping on the /message MCP path
• 50f2769 feat(ha): persistent inventory/audit-index store + restart recovery
• d18a80f feat(lifecycle): myrmex enroll/bootstrap/rotate CLI + enrollment guide
• 3df1b18 feat(lifecycle): mTLS + OIDC-via-trusted-proxy operator authentication
• b5217fa chore: gitignore runtime audit.log artifact
• b918b82 feat(llm): optional pluggable engine + bounded, injection-hardened loop
• a5d82ed feat(llm): per-request model override, timeouts, and retries
• fb3b18b refactor: rename Go module to github.com/olafkfreund/myrmex-hive
• 09711b7 fix(security): scrub Gemini API key from returned error messages
• 67cdb98 feat(secrets): agenix: indirection form + secrets/rotation guide
• 03bc592 feat(tooling): tool schema versioning + capability advertisement
• 2e11162 chore(deps): bump golang.org/x/crypto to v0.53.0; Go 1.25
• 7d942c6 feat(lifecycle): agent enrollment via join tokens + runtime revocation
• d3d56fe feat(compliance): 'myrmex audit watch' tamper-detection alerting
• 223ae0e feat(secrets): HashiCorp Vault backend for secret indirection
• 6ade18c feat(tooling): typed package_query and bounded file_read agent tools
• 25626c6 feat(config): startup validation + MCP server manifest
• fc6c5f8 feat(compliance): audit export/pubkey commands + compliance guide
• 22f71e1 feat(tooling): typed container_ps and k8s_get agent tools
• a54ca87 feat(llm): OpenAI-compatible engine backend (openai/vLLM/llama.cpp)
• f055b30 feat(dashboard): add Fleet and Approvals views to the gateway portal
• dafb1ff feat(telemetry): fleet heartbeat, metrics history, inventory, alerting, query API
• 7a20572 feat(agent): dry-run mode for run_command
• 2cd2356 feat(rbac): command risk tiers, approval workflow, and rate limiting
• fea7f60 feat(rbac): per-token authorization scoping by agent, tag, and tool
• 60d0b5a feat(audit): add 'myrmex audit verify' for signed hash-chained logs
• e3c4b9b feat(tooling): add typed service_control agent tool
• b95dace feat(llm): add pluggable Engine interface (Ollama + disabled backends)
• 33fa137 chore(test): fail-closed fixtures + docs; stop tracking generated keys
• 2964fea feat(install): download released binaries instead of compiling on target
• 894ed36 feat(config): secret indirection for tokens and API keys
• 5432399 feat(dx): add /healthz + /readyz probes and --version build info
• 0d3024f fix(security): harden auth, transport, audit, and command execution
• 40121ac docs: add CLAUDE.md guidance for Claude Code
• 56be8d0 feat: add CNAME file and update _config.yml for custom domain (#4)
• 3780bb6 chore: onboard to Backstage catalog (#1)
• d3f8c8f fix: resolve Jekyll Markdown rendering issue for Mermaid blocks (#3)
• fea0a82 feat: RBAC, signed audit logging, agent HA failover, and Gemma 4 Ollama sidecar (#2)
• 1d3a6cc docs: update README.md and Jekyll index with comprehensive guide and installation scenarios