Release v0.4.0 · opaque-dev/opaque

[0.4.0] - 2026-09-15

Capture private dogfooding workspace(f69fae6)
Prepare private milestone validation(daa3624)
Unify bounded work and Vault SSH(f8a2858)
demo: Add verified human approvals(1da0ab0)
brand: Explore Oleander/ArcBox/Antigravity-inspired motion direction (#23)(8c68d3e)
opaque-providers: Feature-gate the 10 credential providers(908bf97)
demo: Capture optional pilot requests(ad59106)
Add governed workflows and shared dashboard(f699d05)
Add reviewer, bounded outputs and evidence(8446069)
Complete integrations and stateful CI(2078299)
release: Embed cargo-auditable dependency manifests, add verification gate(ccba335)

Record staging artifact validation(605ea26)
Record verified production deployments(ff29064)
Record combined deployment smoke test(0637630)
Record pilot contact deployment(bd86c34)
Align docs with bounded-work product direction(f17d48b)
Recover an unmerged security review from an abandoned worktree(e4b6277)
Record the three-repo split decision (demo / core / dogfood)(9b488c4)
Name the audience across all external surfaces(0557a4e)
Rewrite external copy in the reference-site register, sweep em-dashes(9c9a5bf)
Drop the headcount from the audience frame(ed47cbe)
Focus product story and verification (#82)(5e2899d)
Annotate the security assessment with verified finding statuses(97d247a)
Add compliance control mapping, roadmap, hardening guide and FIPS assessment(ff16314)
Re-verify compliance citations against the public tree(a9a884f)
Re-verify FIPS citations against the rebased main (#87)(93193e1)

Harden providers and refresh demo access(8511a3a)
release: Drop the tag's v prefix from archive filenames(7a9955b)
ci: Pin valid actions and resolve upgrades(7b53a69)
Prove native review and prepare staging(9681a7b)
demo: Keep OAuth callback free of analytics(68b039d)
Close reliability and quality gaps(0dab7ef)
demo: Reduce idle polling and storage writes(7628278)
mcp: Drain in-flight tool calls on stdin EOF instead of dropping them(fc568be)
mcp: Allow authenticated catalog discovery(5608011)
audit: Acquire writer before reading(92c854f)
Validate delivery and legacy audit upgrades(2d3b954)
deps: Upgrade vulnerable XML parser(0f0509b)
ci: Qualify docs and select nightly(bbad650)
Update embedded identity example(b45a3cf)
ci: Select available macOS Python build(b59b008)
ci: Preserve split-user profile access(467e5f0)
Distinguish baseline coverage profiles(413b626)
Stabilize instrumented workspace tests(af54dd5)
Retain shared runtime coverage sources(64b7aaa)
Enforce verified command-flow outcomes(d6a6c10)
Qualify command flows and terminal cleanup(44794b1)
Bind daemon build metadata to source(c5abd83)
core: Close the socket umask race and verify socket dir custody(625eadf)
daemon: Refuse to start when this session can never authenticate locally(44740d7)
policy: Warn when a rule requires a field this platform can't enforce(4891906)
policy: Extend the N1 unenforceable-field warning to known_human_clients(ab28eeb)

core: Promote plugin-trait families out of opaqued into opaque-core(41b2124)
Extract opaque-approval crate from opaqued(522341c)
providers: Extract 10 credential providers into opaque-providers(49365b2)
Extract opaque-bounded-work crate from opaqued(d92e558)
Rename opaque-metrics crate to opaque-showcase, exclude from default build(16507d1)
opaqued: Extract thick RPC dispatch arms out of main.rs(2aaece1)
demo: Make bounded-work approval panel scannable at a glance(5953f47)
Extract demo collateral into kcirtapfromspace/opaque-demo(93805e3)
Separate reusable core contracts(12e2f30)

Synchronize MCP lifecycle fixtures(295bcce)
infisical: Isolate credential fixtures(3ddfb22)
Include gzip in installer fixture PATH(118f145)
Verify native timeout fixture input(0acb561)
Collect subprocess coverage and fault cases(6b711f2)
Verify SSH identity and durable replay denial(24e84be)
Reap task RPC fixture daemons(5312fd0)
Qualify workspace and real acceptance(2ccd1d0)
Await real daemon connection readiness(c414b80)
Enforce coverage tiers and parser checks(40a86e9)
Qualify kernel and durable fixture readiness(101bb06)
core: Cover the socket helper error branches(1c195a5)
core: Serialize umask-window tests against temp-dir tests(f6dfcae)
enclave: Reproduce SR-001 substitution against the real GitHub preparer(17e7872)
e2e: Cover secret/env/scope target substitution; fix azure/gcp dormancy comments(4b1b45c)
web: Close SR-002 coverage — owner-file token is the sole credential(01d58c5)