v0.3.1

Full Changelog: v0.3.0...v0.3.1

v0.3.0

Full Changelog: v0.2.0...v0.3.0

v0.2.0 - security hardening + open-source standards

Security hardening and open-source standardization.

Security

• Fail-closed startup on shipped-default secrets when login is enforced (PREVIEW_MODE=false); the production compose now requires PLATFORM_ADMIN_TOKEN / SESSION_SECRET / DASHBOARD_ADMIN_PASSWORD and ships PREVIEW_MODE=false (no passwordless dashboard in prod).
• Bundled LiteLLM engine upgraded to a patched, configurable version (1.83.14 via the LITELLM_VERSION build arg) - past the CVE fixes the README references. Constant-time admin-token comparison.

Engines

• Engine image versions are env-configurable (BIFROST_VERSION, PORTKEY_VERSION, LITELLM_VERSION) and documented in docs/ENGINES.md ("Engine versions & how to change them").

CI/CD + governance

• Ruff lint gate, dependency caching, and coverage in CI; new CodeQL, dependency-review, Dependabot, and tagged-release workflows (multi-arch GHCR image + SBOM).
• Added docs/THREAT_MODEL.md, CODEOWNERS, .editorconfig, .gitattributes, .nvmrc, and pre-commit. /health now reports the running version.

Full details in CHANGELOG.md. Live demo: https://agnos-llm-gateway.site

Full Changelog: v0.1.0...v0.2.0

v0.1.0 - Agnos Proxy

First release of Agnos Proxy - the gateway-agnostic control plane for LLM routing, cost-tracking and observability.

• OpenAI-compatible proxy (/v1/chat/completions, /v1/embeddings) with streaming.
• Own the control plane + encrypted Fernet key vault in your own infra; swap the translation engine (Bifrost / LiteLLM / Portkey / built-in Direct) per provider, at runtime, behind a compile-time-enforced BackendEngine port.
• Guardrails (CEL + PII/secret detectors), hierarchical budgets, multi-scope rate limits, routing/fallback, cost attribution, OpenTelemetry + Prometheus, and a live dashboard.

See CHANGELOG.md for details. MIT licensed.