Omni-SAG v1.7.0

What's Changed

• feat: route API/CCP/LDAP TLS through FIPS-approved config under warn/enforce by @rupivbluegreen in #42
• feat: tunnel protocol identification (opt-in observe + enforce) by @rupivbluegreen in #43
• feat: OpenTelemetry (OTLP) export — traces + optional metrics/logs (opt-in) by @rupivbluegreen in #44
• docs: roadmap — OTLP + FIPS TLS routing now shipped (v1.x) by @rupivbluegreen in #45

Full Changelog: v1.6.5...v1.7.0

Omni-SAG v1.6.5

What's Changed

• docs: rescue queued design docs (OTLP integration, tunnel protocol ID) by @rupivbluegreen in #40
• docs: refresh README roadmap to match what shipped (v1 → v1.6) by @rupivbluegreen in #41
• ci: publish multi-arch Docker image to Docker Hub on tag by @rupivbluegreen in #9

Full Changelog: v1.6.4...v1.6.5

Omni-SAG v1.6.4

What's Changed

• feat: event export / SIEM integration (opt-in, json/ecs/cef × file/syslog/http) by @rupivbluegreen in #33

Full Changelog: v1.6.3...v1.6.4

Omni-SAG v1.6.1

What's Changed

• fix(authn): resolve nested groups via tokenGroups (in-chain search times out on large AD) by @rupivbluegreen in #35
• fix(session): let Ctrl-C / Ctrl-D end the tunnel-keeper session by @rupivbluegreen in #36
• docs(readme): document v1.6.0 features (nested groups, pcode selector, tunnel keeper) by @rupivbluegreen in #34

Full Changelog: v1.6.0...v1.6.1

Omni-SAG v1.6.0

What's Changed

• feat: legacy scp -O protocol support (opt-in enable_scp) by @rupivbluegreen in #10
• chore: scrub customer-specific example hostname from comments by @rupivbluegreen in #31
• feat: pcode selector + tunnel-keeper session by @rupivbluegreen in #32
• feat(authn): opt-in nested AD group resolution (LDAP_MATCHING_RULE_IN_CHAIN) by @rupivbluegreen in #30

Full Changelog: v1.5.0...v1.6.0

Omni-SAG v1.5.0

What's Changed

• feat: CIDR policy rules — subnet-level authorization with rebind defense by @rupivbluegreen in #7
• fix(session): add additional key exchange (auth) methods for targets by @rupivbluegreen in #8

Full Changelog: v1.4.0...v1.5.0

Omni-SAG v1.4.1

What's Changed

• feat: CIDR policy rules — subnet-level authorization with rebind defense by @rupivbluegreen in #7
• fix(session): add additional key exchange (auth) methods for targets by @rupivbluegreen in #8

Full Changelog: v1.4.0...v1.4.1

Omni-SAG v1.4.0

What's Changed

• feat: CIDR policy rules — 5-task implementation by @rupivbluegreen in #6

Full Changelog: v1.3.0...v1.4.0

Omni-SAG v1.3.0

Full Changelog: v1.2.0...v1.3.0

Omni-SAG v1.2.0

Full Changelog: v1.1.0...v1.2.0