v0.2.0
Release 0.2.0 — 2026-03-29
Major feature release bringing TEE enclave support, DIDComm service migration, backup/restore, and P-256 key support.
Highlights
- AWS Nitro Enclave support — KMS-based secret bootstrap with PCR attestation, encrypted storage (AES-256-GCM), auto-generated DID identity, complete deployment infrastructure
- VTA architecture split —
vta-serviceis now a library;vta-enclaveis a separate binary for TEE deployments - DIDComm service migration — Typed router with middleware, 8 protocol families, 50+ message types
- Backup & restore — Export/import all VTA state with Argon2id + AES-256-GCM password encryption, soft restart
- P-256 key support — New key type with signing oracle endpoint and token cache API
- Prometheus metrics —
GET /metricswith authenticated Monitor role - 5-tier role hierarchy — Super Admin, Admin, Initiator, Application, Monitor
- 226 tests — 31 API integration, 20 security enforcement, 7 backup crypto, 16 key derivation, 8 KMS bootstrap
Breaking Changes
vta-serviceis now a library — TEE deployments usevta-enclave- DIDComm handler signatures changed to
(HandlerContext, Message, Extension<Arc<VtaState>>)pattern - Workspace version bumped from 0.1.1 to 0.2.0
See CHANGELOG.md for detailed release notes.