0.4.0 "Sentinel" — the governed-answer release

Where Goshawk opened the doors, Sentinel stands guard over what comes through them.

GovernedNavigatorLoop (querygraph answer, MCP tool answer_question): question → semantic search (synonyms, bigrams) → RBAC+ODRL receipts (denied sources named as off-limits, never planned) → SQL plans over allowed Sail sources → any LLM via openai_compatible_llm (Ollama, vLLM, llama.cpp, LM Studio) or the deterministic golden baseline → signed TypeDID envelope + schema-valid OpenLineage + Ed25519 attestation.

querygraph.api_auth: mints the path- and body-bound Ed25519 x-qg-envelope headers that qg-rust's serve --require-auth demands — proven live against the running server in the equivalence suite (401 without, 200 with).

Tracks the 0.12 substrate wave: Grust 0.12.0 "Lobster", TypeSec 0.12.0 "Torcello", LakeCat 0.3.0 "Ocelot".

See CHANGELOG.md.

0.3.0 "Goshawk" — the interoperability release

Real Ed25519 signing (crypto extra) with did:key verification methods, verified cross-language by qg-rust. MCP server (querygraph mcp-serve), A2A Agent Card, OpenAI/Anthropic tool-schema export, async LangChain adapters, enriched OSI model (synonyms, relationships, dialect fallback), official OpenLineage 2-0-2 schema validation with spec-conformant deterministic UUIDv5 run ids, PyPI-ready packaging, GitHub Actions CI.

See CHANGELOG.md for full notes.

QueryGraph Python 0.2.0 "Peregrine"

Python port of QueryGraph 0.2.0 "Peregrine" — shares the version line and codename of the Rust implementation (querygraph/qg-rust).

Tracks Grust 0.11.0 "Crab", TypeSec 0.11.0 "Burano", LakeCat 0.2.1 "Lynx".

Highlights

• TypeDID attestation parity — the Pydantic TypeDidEnvelope mirrors Burano's audit-safe attestation (privacy level, negotiated profile, envelope digest).
• Stack references updated to Burano / LakeCat 0.2.1.

All 12 tests pass, including the Rust navigator-bundle equivalence test.