Release v0.3.0 · praxis-proxy/ai

Highlights

🔑 License migrated from MIT to Apache-2.0 (#848)
🔐 New upstream authentication filters: Azure AD (#815), GCP ADC — experimental (#828), and AWS SigV4 request signing (#802)
⚖️ Routing: provider load balancing (#731) and a secure provider gateway boundary (#386)
🧩 Extensibility: http_callout filter (#760); llm-d ext_proc compatibility moved into AI (#334)
📊 Observability: OpenTelemetry routing spans (#729) and provider backend route tracing (#834)

feat(routing): add provider load balancing (#731) — @nerdalert
feat(routing): add secure provider gateway boundary (#386) — @nerdalert
feat(token_rate_limit): sliding-window / token-bucket rate limiting (#796) — @jordigilh
feat(azure): add azure_ad upstream authentication filter (#815) — @szedan-rh
feat: add experimental gcp_adc upstream authentication filter (#828) — @szedan-rh
aws: add aws_sigv4_sign filter for signing upstream AWS requests (#802) — @szedan-rh
feat(callout): add http_callout filter — supersedes #727 (#760) — @usize
feat(llm-d): move ext_proc compatibility into AI (#334) — @nerdalert
feat(filters): add OpenTelemetry routing spans (#729) — @nerdalert
feat(observability): trace provider backend routes (#834) — @nerdalert
feat(openai): generalize the operation registry and matcher (#772) — @cdoern
feat(token-count): report prompt cache token breakdown (#582) — @noyitz
feat(file_search): full-flow-agentic example with IRR file search callout (#737) — @leseb

fix(web_search): validate base_url against SSRF and credential disclosure (#851) — @leseb
fix(mcp_tool_resolve): strip credentials and honor tool_choice on empty resolve (#852) — @leseb
fix(a2a): defer route commit until EOS to prevent prefix-poisoning (#733) — @mkoushni
fix(a2a): reject oversized task-routing TTLs before Instant overflow (#823) — @mkoushni
fix(deps): update h2 for security audit (#764) — @nerdalert

fix(web_search): don't forward hosted web_search_call to inference backend (#853) — @leseb
fix(token_count): add OpenAI Responses API usage extraction (#714) — @yossiovadia
fix(token_count): preserve OpenAI Responses cache writes and parse once (#858) — @leseb
fix(token_usage): recover from SSE overflow instead of silently dropping usage (#782) — @mkoushni
fix(mcp_dispatch): preserve non-text MCP result content (#807) (#850) — @leseb
fix(mcp): bound dynamic session and protocol values (#655) — @skamenan7
fix(subrequest): honor runtime.subrequest_circuit_breaker on the shared client (#830) — @mkoushni
fix(azure_ad): schedule token refresh within skewed validity window (#829) — @szedan-rh
fix(responses): support the include query parameter on store retrieval (#822) — @r-papso
fix(responses): disable parallel tools on first inference (#711) — @skamenan7
fix(conversations): percent-decode conversation ID path segments (#824) — @mkoushni
fix(conversations): align create and update request contracts (#625) — @leseb
fix(guardrails): align NeMo status with /v1/guardrail/checks endpoint (#792) — @liavweiss
fix(openai): preserve non-2xx OGX responses in file resolution (#799) — @skamenan7

refactor(responses): centralize usage accumulation (#702) — @rkaplan-hub
refactor(filters): rename agentic_loop to openai_agentic_loop (#748) — @leseb

fix(compat): align AI with Praxis main body and branch routing (#787) — @nerdalert
fix: keep Praxis main compatibility fixtures current (#757) — @nerdalert
fix: adapt to praxis-proxy-filter 0.5.3 API changes
chore(deps): switch Praxis crates from git tags to crates.io (#725) — @leseb

test(integration): cover IRR delivery of agentic-loop 400/508 rejections (#847) — @leseb
Document and test provider fallback via the Iterative Request Router (#730) — @usize
test: opt loopback fixtures into allow_private_endpoints (#800) — @usize
fix(test): init new praxis-main context fields (#816) — @aslakknutsen
ci(store): add PostgreSQL CI coverage for the response store (#739) — @leseb
ci: add job timeouts, persist-credentials, and CodeQL on PRs / merge queue

chore(license): complete migration from MIT to Apache-2.0 (#848) — @leseb
docs: add attribution rules; correct architecture Key Files paths; fix stale version/image/module references
docs: migrate proposals to the centralized enhancements repo; update governance docs

chore(deps): bump rust 1.97-alpine → 1.98-alpine (#817)
chore(deps): update Cargo.lock dependencies (#738) — @leseb
chore(deps): routine dependabot bumps (codeql-action #819/#820/#776/#777, setup-buildx #818, setup-uv #775) and cargo upgrade refreshes

Revert "fix(guardrails): fail closed on NeMo redact verdict until body replacement" (#821, reverting #721) — @szedan-rh

Full Changelog: https://github.com/praxis-proxy/ai/commits/v0.3.0