v2.6.0

Changelog

• f57bc8c Add Conductor durable audit batch queue (#596)
• 476a113 Add Conductor follower config and capabilities handshake (#595)
• 49331dd Add Conductor signed message foundation (#594)
• 0b9d107 Conductor: add atomic policy apply cache (#608)
• 237418d Conductor: add audit batch ingest boundary (#613)
• 20def0f Conductor: add audit batch summary query (#617)
• 0e1d8e0 Conductor: add audit retention pruning (#625)
• b62b227 Conductor: add control-plane bundle publication boundary (#611)
• 810836c Conductor: add durable audit storage (#616)
• 0ba1630 Conductor: add emergency controls (#623)
• 6b1dd51 Conductor: add enrollment and scoped admin auth (#621)
• b5ccd80 Conductor: add fleet audit sink (#604)
• 1f2512e Conductor: add operator probes and telemetry (#618)
• f2bda72 Conductor: add server runtime wiring (#615)
• e87e6b8 Conductor: enqueue recorder audit batches (#606)
• b3f2d01 Conductor: wire follower remote kill polling (#626)
• bc05a7c Harden enterprise license expiry warnings and CRL enforcement (#592)
• 24d7211 chart: polish pipelock helm chart for v2.5.0 (#571)
• b5364d6 chore(lint): bump golangci-lint to v2.12.2 and clean up findings (#577)
• 7e702e7 chore(release): prepare v2.6.0 pre-tag updates (#641)
• d0dc401 chore(renovate): hold TypeScript and jsonschema majors at known-good versions (#572)
• 76a8e1a ci: Update ci-actions (#551)
• c3f9cc5 ci: Update dependency golangci/golangci-lint to v2.12.2 (#573)
• 5640971 conductor: wire audit batch transport (#602)
• c957ff2 deps: Lock file maintenance (#609)
• 396affd deps: Update dependency @types/node to v24.12.4 (#578)
• 30a74b9 deps: Update gcr.io/oss-fuzz-base/base-builder-go Docker digest to 3c67aea (#566)
• 90dd1e1 deps: Update gcr.io/oss-fuzz-base/base-builder-go Docker digest to eb5c93a (#581)
• 6904308 deps: Update module github.com/CycloneDX/cyclonedx-go to v0.11.0 (#599)
• 87012ba deps: Update module modernc.org/sqlite to v1.50.1 (#569)
• 7cbc866 deps: Update rust-verifier (#552)
• b8ec385 deps: Update ts-verifier (#574)
• 2b727c9 docs(specs): supersede receipt-format v0.1 draft; add prior-art mapping (#583)
• d09cf98 docs(standards): Phase B. OWASP MCP Top 10 v2.5 refresh plus in-toto and SCITT profiles (#588)
• da90386 feat(assess): add NIST AI RMF + HIPAA compliance frameworks + procurement mapping doc (#576)
• c46d39c feat(assess): close evidence trust gaps and bump schema to v2 (#575)
• 9f7353a feat(blockreason): add request_policy_deny reason and accept UUIDv7 receipt ids (#628)
• cde0ce1 feat(conductor): wire follower policy-bundle poller (#640)
• 72767cb feat(diag): WebSocket verify-install check + enterprise Dockerfile tag (#600)
• 81fd5b1 feat(dns): add dns.host_overrides for hostname routing (#589)
• e32ce1a feat(filesentry): block action mode for agent-attributed DLP findings (#603)
• 7b756af feat(filesentry,doctor): per-path watch required: flag + doctor port-collision check (#620)
• c7dac55 feat(hermes): add --mode mcp-only with shared mcpwrap engine (#610)
• 6ec3a7b feat(hermes): add install/verify/rollback + move hook into pipelock binary (#607)
• 913a290 feat(hermes): bridge Hermes Agent hook events into pipelock scanner pipeline (#605)
• 0a96f84 feat(license): add fleet feature flag and gate Conductor + fleet-sink (#636)
• a8c37f4 feat(proxy): SSRF-safe dial path for reverse_proxy.profile: submit (#624)
• 2efdef7 feat(proxy): enforce request_policy across transports (#631)
• 8b5f96b feat(proxy): enforce request_policy on GraphQL-over-GET and multipart (#632)
• db1e677 feat(proxy): reverse_proxy.profile: submit + per-listener trusted_upstream (#622)
• 9be16aa feat(reqpolicy): JSON discriminator rules + WebSocket per-frame policy (#634)
• f805afa feat(scan): detect invisible-Unicode/bidi injection in files (#612)
• c1f57ae feat(scanner): detect hostname/DNS subdomain exfiltration (#642)
• d1f8f8f feat(v2.6): NSA MCP CSI follow-ups: context-leak, lethal-trifecta, per-message signing, replay (#579)
• cbef196 feat: add GraphQL operation extractor for request_policy (#630)
• baf455a feat: add request_policy operation-rails engine and config (#627)
• 9ad4c5b feat: recurse request_policy into JSON batch sub-requests (#633)
• 6b81f31 fix(certgen): accept PKCS8-encoded EC keys in LoadCA (#582)
• 1548b21 fix(deps): bump golang.org/x/crypto to v0.52.0 (13 SSH CVE fixes) (#585)
• 98d0624 fix(deps): bump golang.org/x/net to v0.55.0 (5 HTML-parser CVE fixes) (#584)
• 15b6b60 fix(dlp): harden provider token patterns against false positives (#586)
• 46a160d fix(dlp): tighten remaining provider token patterns (#587)
• 0ead548 fix(hermes): make --mode full load, enable, and block under real Hermes (#629)
• cde7755 fix(mcp): strip inbound com.pipelock/mediation on HTTP listener path (#601)
• 810d26a fix(proxy): consult cfg.Suppress before hard-block in request header DLP (#619)
• 3d863bb fix(proxy): redaction hardening (scanner lockstep + allowlist_unparseable passthrough) (#635)
• c8f6dcc fix(proxy,redact,media): preserve trusted-host file transfers (#639)
• b14f20a fix(redaction): harden body redaction + tighten Databricks DLP pattern (#580)
• a595768 fix: don't honor ambient HTTP_PROXY on upstream egress transports (#645)
• ecf75c4 refactor(audit): options structs for 5 long-param logger functions + 3 TODO closeouts (#597)
• e9af47b refactor(compliance): extract framework ID + feature name constants (#591)
• ac24917 refactor(proxy): consolidate adaptive-upgrade emissions; fix TMPDIR-dependent policy hash (#644)
• cfa0ae1 refactor(proxy): extract sessionKeyFor helper for session-key construction (#643)
• 0180f41 refactor(runtime,mcp): split server.go and proxy_http.go into per-concern files (#598)
• 041bac0 refactor: relocate Conductor packages; refresh README + comparison (#637)