v0.4.1 — release pipeline fix

Patch release fixing the release/publish pipeline.

• Cap fastapi>=0.115,<0.136: FastAPI 0.136 changed include_router to keep nested router objects instead of flattening routes onto app.routes, which emptied the OpenAPI schema of the /v1 and studio routes (routing still worked, but schema + client generation broke). Pinning restores the working inclusion model for all installs.
• Wheel-test CI job installs testcontainers[postgres] so the Docker-gated backend tests run.

Includes all v0.4 security hardening (econ token-issuer block, ECP_JWT_SECRET fail-closed guard, studio/cost RBAC, budget fail-open logging).

v0.4 — governed agent runtime

First public release of zeroth-core as the governed agent runtime.

Build multi-agent graphs in code or on canvas and deploy them as multi-tenant API services where audit trails, human approval gates, and per-tenant budget caps are enforced by the runtime itself.

Security hardening (v0.4)

• Econ-plane open token issuer (POST /regulus/**/auth/token) blocked at the gate — unreachable over HTTP even with a valid key; self-calls mint tokens in-process.
• Fails closed at startup when the bundled Regulus control plane is mounted with the placeholder ECP_JWT_SECRET.
• RBAC enforced on the studio (workflow authoring) and cost (admin-only) APIs.
• Budget fail-open is now logged so evaporated cap enforcement is observable.

See SECURITY.md for deployment hardening notes.

v0.2.0 — Platform Extensions for Production Agentic Workflows

What's New

v4.0 Platform Extensions — production-grade agentic workflow capabilities for Zeroth.

Added

• Subgraph composition — nest published graphs with governance inheritance, approval propagation, cycle detection (90 tests)
• Parallel fan-out/fan-in — budget isolation, configurable merge strategies (55 tests)
• Template registry — CRUD REST API with audit-safe secret redaction (59 tests)
• Context window management — token tracking with compaction strategies (68 tests)
• Resilient HTTP client — retry, circuit breaker, rate limiting (62 tests)
• Artifact store — content-addressed storage with TTL, auth-protected REST endpoint
• v4.0 documentation and OpenAPI spec updates

Fixed

• TemplateRegistry DELETE endpoint design debt resolved
• Lint/format fixes across Phase 40 source files

Full Changelog: https://github.com/rrrozhd/zeroth-core/blob/main/CHANGELOG.md

---

pip install zeroth-core==0.2.0

v0.1.1

Full Changelog: https://github.com/rrrozhd/zeroth-core/commits/v0.1.1