v0.8.0

v0.8.0 (2026-10-24)

This release is published under the MIT License.

Code Style

• Format async LangGraph test (ac5134f)

• Format async LangGraph test signature (acaf204)

• Format LangGraph control-flow tests (98dbc2d)

• Format LangGraph documentation snippets (850fd08)

• Format LangGraph documentation snippets (9e98193)

• Format top-level LangGraph examples (25fa394)

• Format top-level LangGraph examples (9dbba6e)

• Normalize control-flow test spacing (286020a)

• Separate example test functions (1be0a64)

• Sort LangGraph guard imports (272bcb1)

Continuous Integration

• Validate changes on develop (3c0929b)

Documentation

• Align package metadata with LangGraph integration (1bb5135)

• Align README security model with node guard (7c3968e)

• Clarify release status and integration checks (12553d6)

• Clarify trusted LangGraph runtime context (baf7820)

• Clarify trusted LangGraph runtime context (a580bd5)

• Define LangGraph node guard threat boundary (5a8f684)

• Document LangGraph node protection (b76bf90)

• Document LangGraph release smoke test (eed7217)

• Explain LangGraph node authorization boundary (892e5d9)

Features

• Add LangGraph node authorization guard (d9d3d2a)

• Add model-free protected LangGraph example (0cdd638)

Testing

• Allow node guard resolver overrides (c0609f7)

• Cover LangGraph control flow and identity boundaries (794e867)

• Cover LangGraph node authorization (0d211d8)

• Declare Command destination without duplicate static edge (2a4e2fc)

• Execute LangGraph node guard example (c9318b4)

• Smoke-test optional LangGraph node guard (86e258e)

• Smoke-test optional LangGraph node guard (406417d)

---

Detailed Changes: v0.7.2...v0.8.0

v0.7.2

v0.7.2 (2026-10-24)

This release is published under the MIT License.

Documentation

• Align release guide with optional integration smoke tests (ada4935)

---

Detailed Changes: v0.7.1...v0.7.2

v0.7.1

v0.7.1 (2026-10-24)

This release is published under the MIT License.

Bug Fixes

• Normalize resource IDs before metadata lookup (5c53078)

Code Style

• Format resource normalization regression tests (944da5f)

Documentation

• Clarify canonical resource resolution contract (41609ef)

Testing

• Cover resource normalization across authorization paths (504e2d0)

---

Detailed Changes: v0.7.0...v0.7.1

v0.7.0

v0.7.0 (2026-10-24)

This release is published under the MIT License.

Bug Fixes

• Require resolved MCP Context annotation (2c6c6c9)

Build System

• Add optional MCP SDK extra (35906d3)

Code Style

• Finalize sorted test imports (e7a8019)

• Fix MCP adapter lint findings (2534b0d)

• Format async MCP test principal resolver (5195e26)

• Format MCP context resolver (71baf43)

• Normalize MCP test imports (8ff5b2f)

• Order MCP adapter test imports (8741e0d)

• Restore Ruff-sorted test imports (08756b9)

• Sort MCP adapter test imports (d701cfc)

Continuous Integration

• Diagnose MCP test import ordering (06d5776)

• Remove temporary import diagnostic (f03a962)

• Scope MCP smoke-test policy to trusted role (6a038cd)

• Scope MCP smoke-test policy to trusted role (eeceef9)

• Smoke-test optional MCP tool adapter (5fe8562)

• Smoke-test optional MCP tool adapter (f0fe066)

Documentation

• Add MCP tool authorization guide (d1b236d)

• Clarify MCP authorization boundary in docs/audit-events.md (646d9ff)

• Clarify MCP authorization boundary in README.md (12783df)

• Clarify MCP security boundary in docs/threat-model.md (babb362)

• Clarify MCP security boundary in SECURITY.md (5aa4513)

• Distinguish MCP audit correlation fields (28734bd)

• Document optional MCP tool authorization (367d652)

• Format MCP README example (867a588)

Features

• Add optional MCP tool authorization adapter (41170a9)

• Add secured MCP server example (a79af73)

Testing

• Add principal role to async MCP policy (73dcd7f)

• Assert MCP denials as protocol error results (d57dbe8)

• Cover MCP tool authorization adapter (d3854df)

• Import audit event from public API (f21b7a0)

• Remove function call from context default (ba4f99e)

• Tighten MCP context validation case (45f7fc6)

---

Detailed Changes: v0.6.0...v0.7.0

v0.6.0

v0.6.0 (2026-10-24)

This release is published under the MIT License.

Bug Fixes

• Scope audit summary to current demo run (3056bb6)

• Tighten end-to-end demo types and formatting (e686d61)

Chores

• Ignore local security demo databases (9cea72d)

Documentation

• Document end-to-end security workflow (869ceb2)

Features

• Add end-to-end secure agent workflow demo (8978a5e)

Testing

• Account for checkpoint resume audit events (18fc945)

• Cover end-to-end security workflow (5c40cba)

• Verify demo reports remain scoped across persistent runs (64d0fe8)

---

Detailed Changes: v0.5.1...v0.6.0

v0.5.1

v0.5.1 (2026-10-24)

This release is published under the MIT License.

Documentation

• Sync README with v0.5.0 security APIs (ce83ce9)

---

Detailed Changes: v0.5.0...v0.5.1

v0.5.0

v0.5.0 (2026-10-24)

This release is published under the MIT License.

Bug Fixes

• Annotate all guard overloads for policy registry (596d2d8)

• Audit the exact active policy snapshot (e079c02)

• Audit the exact active policy snapshot (6066145)

• Narrow policy registry type in middleware (b70561f)

• Narrow policy registry type when capturing guard snapshot (7d29aa5)

• Normalize audit hash serialization for lint (eb93b86)

• Preserve the guard policy validation message (fa83c13)

• Preserve the middleware policy validation message (8dfe06b)

• Use unambiguous hash-chain separators (662540a)

Code Style

• Format ABAC test condition (6d04359)

• Format policy registry test update (d8a349b)

• Format replay assertion (5210af4)

• Match formatter spacing for added tests (3a7307e)

• Match formatter spacing for added tests (7db15f2)

• Match formatter spacing for added tests (a623ecc)

• Match formatter spacing for added tests (ad06f21)

• Normalize approval store end-of-file (68a7fa6)

• Normalize approval-store test SQL (bd5e950)

• Normalize policy registry conditions (83a734b)

• Normalize rollback compare-and-swap (a256530)

• Normalize test file endings (6892eda)

• Normalize test file endings (5b4495d)

• Normalize test file endings (162ad7c)

• Normalize test file endings (3de23a5)

• Simplify audit hash-chain query (0f84a12)

• Sort standard library imports (cbce22f)

• Sort standard library imports (e28b7c8)

• Wrap audit pagination validation (62d63aa)

• Wrap middleware request fixture (9fdc51c)

• Wrap middleware validation and metadata (5a755be)

• Wrap policy snapshot audit metadata (3abcbe2)

Documentation

• Add secure approval store integration guide (386fd82)

• Clarify approval fingerprint retention boundary (4289de4)

• Clarify built-in approval store security boundary (29f9349)

• Document operational security primitives (281c31b)

• Document SQLite audit durability and chain limits (5fad683)

• Explain atomic policy publication and rollback (f81912f)

• Explain trusted reviewer binding in middleware (2f189c6)

• Update threat model for atomic policy, approval, and audit stores (54b74be)

Features

• Add atomic policy registry and rollback (3a13c53)

• Add durable single-use approval store (c1c48c5)

• Add durable tamper-evident SQLite audit sink (6180970)

• Export approval, policy registry, and audit persistence APIs (7adea59)

• Integrate approval store and live policy snapshots into middleware (cecc360)

• Support atomic policy registry in callable guards (f18d260)

Refactoring

• Simplify policy registry middleware tests (2521578)

Testing

• Add authorization invariant and adversarial property checks (5283db2)

• Cover approval expiry, replay, and concurrent consumption (50c5b67)

• Cover atomic policy reload, rollback, and guard integration (8ccc35d)

• Cover audit event validation and callback misuse (f34ca20)

• Cover durable audit persistence and tamper detection (77f632b)

• Cover invalid policy registry inputs and stale rollback (f1f4d31)

• Cover malformed and mismatched audit chain payloads (de994e7)

• Cover middleware approval grants and policy snapshots (bb521cf)

• Cover optional middleware resolver validation (1c5d529)

• Cover structured audit and correlation resolver validation (bcbdab5)

• Verify approval transactions roll back on database failures (77c7573)

• Verify concurrent audit appends preserve hash-chain integrity (7a0480e)

• Verify concurrent policy updates use compare-and-swap (5dee8b4)

---

Detailed Changes: v0.4.0...v0.5.0

v0.4.0

v0.4.0 (2026-10-24)

This release is published under the MIT License.

Features

• audit: Add structured authorization events and OpenTelemetry integration (ca721fd)

---

Detailed Changes: v0.3.1...v0.4.0

v0.3.1

v0.3.1 (2026-10-24)

This release is published under the MIT License.

Bug Fixes

• validation: Enforce strict semantic versions for policy bundles (6e8d7a9)

---

Detailed Changes: v0.3.0...v0.3.1

v0.3.0

v0.3.0 (2026-10-24)

This release is published under the MIT License.

Bug Fixes

• bundle: Compare effective outcomes in policy simulation (2e1112a)

• bundle: Import diagnostic severity enum (0a956fc)

• bundle: Normalize invalid policy version errors (bc68672)

• bundle: Parse declared rule effects into typed enums (02004c6)

• bundle: Reject duplicate YAML keys and normalize file errors (fa86bb0)

• bundle: Remove redundant parser type ignores (232c8c2)

• bundle: Strictly validate schema and condition field types (790974f)

• bundle: Type simulation and explanation APIs (90ba29e)

• example: Print policy bundle report sections cleanly (538feee)

Build System

• dev: Install PyYAML typing stubs for strict mypy (ce67b10)

Code Style

• api: Organize public bundle exports (3da3ac0)

• bundle: Align source with formatter output (8696d04)

• bundle: Align test module with formatter output (2b7f419)

• bundle: Normalize spacing before file tests (4960129)

• bundle: Normalize spacing before parser edge tests (65f27e5)

• bundle: Satisfy import and line-length checks (4122adc)

• bundle: Separate JSON parser tests consistently (9832ce5)

• bundle: Wrap long test expressions (df2b0b7)

• policy: Follow formatter for numeric comparison condition (bf1f80c)

• policy: Wrap long explanation condition (706a73e)

Documentation

• bundle: Document declarative policy workflow (01264f6)

• bundle: Explain policy format lint and simulation (278c7c3)

• example: Add policy bundle simulation workflow (640fa1a)

• example: Add tenant-aware payroll policy bundle (2f47872)

• security: Document policy bundle trust boundaries (6b0e0e1)

Features

• api: Export policy bundle and diagnostic APIs (53708d6)

• bundle: Add immutable versioned policy bundles (db868f8)

• bundle: Lint broad policy scopes and redundant conditions (3cae776)

• bundle: Load and save policy bundles by file type (db2a149)

• bundle: Simulate candidate policy and baseline outcomes (97c2ceb)

• package: Add optional YAML policy bundle support (51c567a)

• policy: Explain authorization decisions by rule (d850ce1)

Testing

• bundle: Assert simulation report omits request fields (765277b)

• bundle: Cover file formats and strict YAML validation (b02580f)

• bundle: Cover policy simulation and baseline diffs (5933735)

• bundle: Cover strict parser failure paths (c0e86ad)

• bundle: Cover strict policy serialization and validation (25b5127)

• bundle: Distinguish outcome changes from reason changes (616a0e6)

• bundle: Exercise JSON recursion handling without deep fixtures (7626db6)

• bundle: Reject non-string policy versions (b2cde1a)

• bundle: Type invalid file path fixture correctly (3d2d0a5)

• bundle: Type temporary policy paths correctly (c563972)

• bundle: Use raw regex strings for expected errors (f8a6fb1)

• bundle: Verify policy lint diagnostics (e1db607)

• example: Exercise policy bundle workflow end to end (e9f36c5)

• policy: Cover built-in attribute paths and safe comparisons (41a5e79)

• policy: Verify explain traces and safe redaction (a94eaa5)

---

Detailed Changes: v0.2.0...v0.3.0