v0.3.0

What's Changed

• fix(pages): guard runbook Liquid tokens so the Jekyll build succeeds by @rmednitzer in #118
• docs(pages): dark theme (midnight) + drop the "Home" landing title by @rmednitzer in #119
• docs(pages): rebuild the documentation site with MkDocs Material by @rmednitzer in #120
• chore(deps): update github-actions by @renovate[bot] in #121
• chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.20 by @renovate[bot] in #122
• fix(deps): update python dependencies - autoclosed by @renovate[bot] in #123
• chore(deps): update actions/checkout action to v7 by @renovate[bot] in #124
• chore(renovate): adopt shared renovate-config preset (keep repo rules) by @rmednitzer in #125
• chore(renovate): repoint preset to infra-hosted renovate-preset by @rmednitzer in #127
• feat(broker): opt-in Tier-3 confirmation broker (ADR 0009) + 2026-07-15 audit by @rmednitzer in #128
• Add Tier-3 confirmation broker configuration by @rmednitzer in #129
• fix(security): redaction secret leak + ReDoS + SSH deny/broker gaps (2026-07-15 adversarial + perf pass) by @rmednitzer in #130
• fix(renovate): drop unresolvable external preset to unpause Renovate (#126) by @rmednitzer in #131
• chore(deps): update dependency cryptography to v49 by @renovate[bot] in #134
• chore(deps): update actions/upload-pages-artifact action to v5 by @renovate[bot] in #133
• chore(deps): update actions/deploy-pages action to v5 by @renovate[bot] in #132
• docs(deployment): host integrity + config-drift monitoring (DOC-6) by @rmednitzer in #135
• docs: add ADR 0009 to the mkdocs nav by @rmednitzer in #136
• feat(audit_tail): read-only triage filters; close AUD-1 (split disposition) by @rmednitzer in #137
• fix(sshpool,sessions): idle reaper must not evict in-use connections/sessions by @rmednitzer in #138
• fix(sshpool): pin the connection for the duration of run() by @rmednitzer in #139
• test(policy): pin session_send payload classification; document the limit by @rmednitzer in #140
• fix(redaction): RED-8 — quoted secret tail leaked past the P1 scan window by @rmednitzer in #141
• fix(oauth): AUTH-3 — enforce token expiry atomically at exchange by @rmednitzer in #142
• docs(adr): add ADR 0010 — rollback/verify broker (BRK-2), proposed/deferred by @rmednitzer in #143
• docs(adr): add ADR 0011 — Windows targets via OpenSSH + PowerShell 7 by @rmednitzer in #144
• feat(policy): WIN-1 — Windows/PowerShell-7 tier classification (ADR 0011) by @rmednitzer in #145
• feat(redaction): WIN-1 — PowerShell credential redaction (ADR 0011 inc. C) by @rmednitzer in #146
• release: prepare v0.3.0 by @rmednitzer in #147

Full Changelog: v0.2.0...v0.3.0

Release v0.2.0

What's Changed

• fix(ci): drop invalid --require-hashes=false flag in sbom workflow by @rmednitzer in #51
• feat(pool): SSH connection cache TTL + close drift gaps in tools/instructions by @rmednitzer in #56
• Build(deps): Bump pytest-asyncio from 1.3.0 to 1.4.0 by @dependabot[bot] in #55
• Build(deps): Bump uvicorn from 0.47.0 to 0.48.0 by @dependabot[bot] in #54
• Build(deps): Bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #53
• Build(deps): Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #52
• ci(security): SHA-pin Actions; close C-005 and B-014; add CODEOWNERS by @rmednitzer in #57
• fix: Phase-2 audit follow-up + pip-audit CI gate by @rmednitzer in #58
• fix: Phase-2 lows + SLSA L3 build provenance attestation by @rmednitzer in #59
• docs(audit): add 2026-05-27 engagement evidence pack by @rmednitzer in #60
• fix(redaction): scrub common bare provider secret shapes (audit F-004) by @rmednitzer in #61
• docs: runbook §8 documentation-consistency pass (post-F-004) by @rmednitzer in #62
• docs: fix stale coverage-floor comment + inventory the audit engagement packs by @rmednitzer in #63
• feat(audit): tamper-evident hash chain + 2026-06-01 audit pass (ADR 0007) by @rmednitzer in #64
• feat: seccomp-notify audit channel (ADR 0006, B-021) + SFTP per-call timeouts (F-6) by @rmednitzer in #65
• Build(deps): Bump mcp from 1.27.1 to 1.27.2 by @dependabot[bot] in #66
• Build(deps): Bump ruff from 0.15.14 to 0.15.15 by @dependabot[bot] in #67
• Build(deps): Bump uvicorn from 0.48.0 to 0.49.0 by @dependabot[bot] in #68
• Build(deps): Bump pypa/gh-action-pypi-publish from 106e0b0b7c337fa67ed433972f777c6357f78598 to ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e by @dependabot[bot] in #70
• Build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #71
• Build(deps): Bump actions/attest-build-provenance from 43d14bc2b83dec42d39ecae14e916627a18bb661 to 977bb373ede98d70efdf65b84cb5f73e068dcc2a by @dependabot[bot] in #72
• Build(deps): Bump starlette from 1.1.0 to 1.2.1 by @dependabot[bot] in #69
• chore(deps): update minor and patch by @renovate[bot] in #75
• ci: set least-privilege workflow permissions and optimize Renovate config by @rmednitzer in #78
• docs: mark MCP SDK Renovate-tracked in README (Dependabot retired) by @rmednitzer in #79
• chore(deps): update actions/attest-build-provenance action to v4 by @renovate[bot] in #76
• chore(claude): harden + realign .claude/settings.json by @rmednitzer in #81
• chore(deps): update github-actions to 8aad20d by @renovate[bot] in #82
• chore(deps): update pre-commit hooks to v0.15.16 by @renovate[bot] in #83
• chore(deps): update python dependencies by @renovate[bot] in #84
• chore(deps): update pre-commit hooks to v6 by @renovate[bot] in #85
• Add tool-selection guidance: instructions, tool descriptions, and an operating_guide prompt by @rmednitzer in #86
• Close backlog B-024/B-026 (seccomp follow-ups) and R-002/R-003 (server consolidation) by @rmednitzer in #87
• Audit pass (2026-06-12): validation, security review, and mcp pin-drift reconciliation by @rmednitzer in #88
• Backlog: gate ssh_keyscan via deny list (SEC-1), seccomp test asserts (QUAL-1), gitleaks config (TOOL-1) by @rmednitzer in #89
• Backlog: add gitleaks CI secret-scan workflow (TOOL-3) by @rmednitzer in #90
• Backlog: drop checkout + persisted token from dependency-review job (SEC-2) by @rmednitzer in #91
• Backlog: drive /metrics tests via httpx ASGITransport, closing REL-1 by @rmednitzer in #92
• docs: reconcile runbook §7 with the audit-pass closures; close TOOL-2 with Renovate evidence by @rmednitzer in #93
• docs: record main-protection ruleset hardening; close F-G2 + P2-3 by @rmednitzer in #94
• chore(deps): update python dependencies by @renovate[bot] in #96
• chore(deps): update pre-commit hooks to v0.15.17 by @renovate[bot] in #95
• fix(deps): update dependency pydantic-settings to v2.14.2 [security] by @renovate[bot] in #97
• docs: record 2026-06-21 ADR 0005 validation pass; fix §8.18 ADR marker drift (DOC-1) by @rmednitzer in #98
• audit(2026-06-21): full validation + security audit — dep-floor hardening (SEC-3), CODEOWNERS Renovate fix (TOOL-4) by @rmednitzer in #99
• fix(redaction): cover Anthropic sk-ant- and HuggingFace hf_ token shapes (SEC-4) by @rmednitzer in #100
• audit follow-ups: close P2/P3 backlog (CI-1/2, SEC-6/7, FMT-1, QUAL-2, DOC-4); defer SEC-5/SEC-8 with rationale by @rmednitzer in #101
• docs(backlog): record SEC-5 disposition — accepted as-designed (operator decision) by @rmednitzer in #102
• fix(oauth): create token-store dir 0o700 and fail closed if it stays accessible (SEC-8) by @rmednitzer in #103
• security(audit): adversarial red-team pass — fix systemic \b regex bug (RED-1/POL-1), OAuth token confusion (AUTH-1), PEM ReDoS (RED-2) by @rmednitzer in #104
• docs: sync living docs/comments to the TIER2/TIER3 (?<![\w]) anchor (post-#104) by @rmednitzer in #105
• security(ssh): bounds + auditability on the SSH surface (SSH-1/2/3) by @rmednitzer in #106
• security(ssh_keyscan): normalize literal-IP encodings into the deny probe (SSRF-1) by @rmednitzer in #107
• docs(auth): authentication-lifecycle guide; make opt-in default explicit by @rmednitzer in #109
• security(oauth): close single-client lockdown re-registration bypass (AUTH-2) by @rmednitzer in #108
• security(redaction): cover AWS/Azure/Slack secrets; scrub bytes + dict keys (RED-3/4/5) by @rmednitzer in #110
• security(config,audit): limit caps, non-regular audit-sink flag, CEF header escape (CFG-1/OBS-1/FMT-2) by @rmednitzer in #111
• security(deploy): GPG fingerprint pin, 0750 config dir, Caddy CSP + edge docs (DEP-1/2, EDGE-1/2) by @rmednitzer in #112
• ci(sbom): attest SBOM build provenance via Sigstore (CI-3) by @rmednitzer in #113
• security(ssh): extend IP-encoding deny normalization to transfer/forward probes (SSRF-2) by @rmednitzer in #114
• docs: consistency sweep across living .md files + B-005 reconciliation by @rmednitzer in #115
• release: prepare v0.2.0 (version, CHANGELOG, supported-versions, compare links) by @rmednitzer in #116
• docs(pages): GitHub Pages documentation site from /docs by @rmednitzer in #117

New Contributors

• @renovate[bot] made their first contribution in #75

Full Changelog: v0.1.0...v0.2.0