v0.4.1

Changelog

• 24bec68: docs: install the Python client from PyPI (#53) (@roee-hersh)
• 38912a5: docs: install the Node client from npm; publish with trusted publishing only (#54) (@roee-hersh)
• 67bbc14: docs: quickstart, architecture, deploy guide and references; Helm chart on GHCR (#55) (@roee-hersh)

v0.4.0

Changelog

• 9a7a25a: docs/assets: the check flow as a PNG (#50) (@roee-hersh)
• b1ca9df: argocd: panic in the transport, not on a nil connection, in the fetch-panic test (#51) (@roee-hersh)
• af3a908: sdk: Python and Node client packages, attached to every release (#52) (@roee-hersh)

v0.3.1

Changelog

• 3728d94: examples: calling hallpass from a TypeScript agent (Vercel AI SDK, MCP TypeScript SDK) (#45) (@roee-hersh)
• bdec20d: check: fresh answers and upstream evidence in the decision log (#46) (@roee-hersh)
• 65ccf69: README: how hallpass differs from policy engines and OAuth, integration verification tiers, AI-assisted note; demo GIF and MP4 (#47) (@roee-hersh)
• 7d6b6b5: README: keep the landing page short, move operating and testing detail into docs/ (#48) (@roee-hersh)
• f12e4ef: docs: where hallpass came from, and where to put the check (#49) (@roee-hersh)

v0.3.0

Changelog

• 5a986e3: Agent integration: guarded takes the user from the app; LangChain, LangGraph, Strands and Claude Agent SDK examples; docs (#31) (@roee-hersh)
• 1391ccd: Helm chart under deploy/helm/hallpass (#34) (@roee-hersh)
• ae3e27e: README: security model section (#35) (@roee-hersh)
• 7ea1e61: Add CLAUDE.md: review, open a pull request and merge instead of stopping at a branch (#36) (@roee-hersh)
• 35d9f30: docs: where the acting user comes from, with web app and Slack examples (#38) (@roee-hersh)
• 77117d8: googlecloud: permission checks through the Policy Troubleshooter (#21) (@roee-hersh)
• f866f77: databricks: permission checks through Unity Catalog and the Permissions API (#22) (@roee-hersh)
• b7c2635: bitbucket: permission checks for Cloud and Data Center (#23) (@roee-hersh)
• 8f9a419: pagerduty: permission checks from base and team roles (#25) (@roee-hersh)
• 13f13ff: datadog: permission checks from roles and restriction policies (#26) (@roee-hersh)
• 6aba4ab: zendesk: permission checks from roles, custom roles and ticket access (#27) (@roee-hersh)
• f3a672f: linear: team, issue and project visibility from workspace roles (#29) (@roee-hersh)
• 821bc25: azure: RBAC evaluation from role and deny assignments (#33) (@roee-hersh)
• 0d5e439: vault: ACL policy evaluation for identity entities (#37) (@roee-hersh)
• 3eb3300: snowflake: privilege checks from SHOW GRANTS over the role hierarchy (#39) (@roee-hersh)

v0.2.0

Changelog

• 447589d: Add CODEOWNERS: the maintainer reviews every change (#9) (@roee-hersh)
• 67de63c: README: demo, how-it-works diagram and Docker quickstart (#10) (@roee-hersh)
• ca580d9: Fix nightly fuzz failure (C1 controls in resources); slower README demo (#20) (@roee-hersh)
• c09d581: Add hallpass check: answer one permission question from the CLI (#24) (@roee-hersh)
• 8b4b390: Add a new-issue skill for writing hallpass issues (#28) (@roee-hersh)
• 03b3a16: examples: calling hallpass from an AI agent (MCP server and LangChain tool) (#30) (@roee-hersh)
• 93d4e11: Release daily, and a release skill for manual releases (#32) (@roee-hersh)

v0.1.0

Changelog

• 74ae4c1: release: allow starting a release from the Actions tab (#8) (Roee Hershko 113914991+roee-hersh@users.noreply.github.com)
• 18557e0: Open source readiness: README intro, contributing and security docs, issue templates, release workflow (#3) (Roee Hershko 113914991+roee-hersh@users.noreply.github.com)
• e2a05d0: Security review fixes: cache keys, GitLab next links, reserved Kubernetes groups (#2) (Roee Hershko 113914991+roee-hersh@users.noreply.github.com)
• 210dbc7: Merge origin/main into the security review fixes (Claude noreply@anthropic.com)
• e497cb3: hallpass: permission check service with eleven integrations (#1) (Roee Hershko 113914991+roee-hersh@users.noreply.github.com)
• f85f713: itest: honour an OpenAPI server path whose host carries a template variable (Claude noreply@anthropic.com)
• bd1a3b9: cmd: the serve end-to-end test stops the server through a context, not a signal (Claude noreply@anthropic.com)
• b6eb405: Security review fixes: cache keys, GitLab next links, reserved Kubernetes groups (Claude noreply@anthropic.com)
• ef9f919: authx: SigV4 vectors compare without carriage returns; testdata is never line-ending converted (Claude noreply@anthropic.com)
• ae293f7: integration: one template and email_domains helper for kubernetes, gitlab and github; jira token through authx (Claude noreply@anthropic.com)
• ec6dba8: authx: the AWS credential provider shares one detached, panic-safe fetch (Claude noreply@anthropic.com)
• 04ea0cf: cache, authx, argocd: a panicking fill never wedges a key, and a cancelled leader never aborts the waiters (Claude noreply@anthropic.com)
• 2591d82: engine: identity cache keyed by connection, user and groups (Claude noreply@anthropic.com)
• 8ae6ec7: httpx, config: header wait follows the connection timeout, loopback check parses the host, repeated top-level keys are rejected (Claude noreply@anthropic.com)
• 4bed990: fuzz: googleworkspace and microsoft365 resource parsers, OData string escaping (Claude noreply@anthropic.com)
• ef583ea: microsoft365: unreported account state is unknown, membership rows checked against the user, custom roles and hidden groups are unknown (Claude noreply@anthropic.com)
• 07bea93: googleworkspace: send-as verification statuses, Gmail checked for the own mailbox, unreported status is unknown (Claude noreply@anthropic.com)
• 2262a43: fuzz: salesforce resource parser and SOQL string escaping (Claude noreply@anthropic.com)
• 2afa877: salesforce: exclude session-based and expired assignments, exact username first, trusted instance_url (Claude noreply@anthropic.com)
• 4c5af44: itest: abort the response when the client times out (Claude noreply@anthropic.com)
• 6a6ad8d: readme: fuzz targets and the example config (Claude noreply@anthropic.com)
• 5972ca3: ci: nightly fuzz runs for the new parser targets (Claude noreply@anthropic.com)
• 663d45b: fuzz: resource parsers of gitlab, github, jira, confluence, slack and aws (Claude noreply@anthropic.com)
• fdb5f99: examples: aws, microsoft365, googleworkspace and salesforce connections (Claude noreply@anthropic.com)
• 22cd1b7: github: branch rules and classic protection, forking for pr.create, stricter SAML identity (Claude noreply@anthropic.com)
• 1a0d89d: aws: allowed with missing context keys is unknown, action and resource verdicts merge to the more restrictive (Claude noreply@anthropic.com)
• c653960: jira, confluence: exact email match only, paginated user search, unevaluated answers are unknown (Claude noreply@anthropic.com)
• 256fe7c: itest: AnySpec validates only when every description is present (Claude noreply@anthropic.com)
• d1aea60: contract: GitHub under /api/v3 with its media type, GitLab users endpoints from its own user entity (Claude noreply@anthropic.com)
• 4292608: contract: dynamic mode for Jira, legacy Slack token patch, request violations from the Prism log (Claude noreply@anthropic.com)
• ad286f2: slack: close review findings (Claude noreply@anthropic.com)
• d72fbf0: gitlab: close review findings (Claude noreply@anthropic.com)
• ee1134d: Contract tests: run integrations against Prism mocks of the API descriptions (Claude noreply@anthropic.com)
• e0ac93d: CI: contract job against Prism; README testing notes (Claude noreply@anthropic.com)
• c30dc0b: microsoft365, googleworkspace: validate requests against the API descriptions (Claude noreply@anthropic.com)
• 5e2232a: M8: microsoft365 and googleworkspace integrations (Claude noreply@anthropic.com)
• 3909d9d: M9: salesforce integration; CI job for spec validation (Claude noreply@anthropic.com)
• 6116f58: Validate every fake-upstream request against the vendor API description (Claude noreply@anthropic.com)
• e9b911f: M7: aws integration (Claude noreply@anthropic.com)
• 979afeb: examples: one commented connection per integration (Claude noreply@anthropic.com)
• 53df573: kubernetes: warn on over-privileged tokens in probe (Claude noreply@anthropic.com)
• cdbba89: Live test runner, CI fuzz job, testing docs (Claude noreply@anthropic.com)
• b722b5e: Fuzz the resource parsers; reject decoded control characters (Claude noreply@anthropic.com)
• 24fb5b8: M4: github integration (Claude noreply@anthropic.com)
• 8227288: M6: slack integration (Claude noreply@anthropic.com)
• 64ab1da: M5: jira and confluence integrations (Claude noreply@anthropic.com)
• c57aee4: authx: AWS SigV4, STS, credential chain and Query/JSON-1.1 client (Claude noreply@anthropic.com)
• 8c3067d: M3: gitlab integration (Claude noreply@anthropic.com)
• d49a792: authx: JWT signing, OAuth 2.0 fetchers and token cache (Claude noreply@anthropic.com)
• ae32b52: M2: argocd integration (Claude noreply@anthropic.com)
• daee994: M1: kubernetes integration (Claude noreply@anthropic.com)
• 5e3de29: M0: hallpass skeleton (Claude noreply@anthropic.com)
• e74b2c0: Create README.md (Roee Hershko 113914991+roee-hersh@users.noreply.github.com)