temper v0.6.0

What's Changed

• mcp: the ledger/graph family crosses the network door (trail, facets, relationships, citation audit) by @jcoletaylor in #964
• mcp: the service's last auth state comes out — the profile cache is deleted, identity travels per request by @jcoletaylor in #965
• mcp: the 400-label sweep — resources and search adopt the api_error_cause strip (declared parity deltas, one register row) by @jcoletaylor in #966
• mcp: cognitive_maps + contexts cross the network door (beat G3d) by @jcoletaylor in #967
• api: cogmap-home shapes pair + flat artifact read — route-first for the beat G4 door crossing by @jcoletaylor in #968
• mcp: beat G4 — the last mixed direct cluster crosses the network door (reblock + blobs + segmented ingest + data_artifacts/shapes) by @jcoletaylor in #969
• cli: temper-cli ↔ temper-client surface parity — the 9 uncalled client methods gain CLI verbs (+ the 3 G4-minted ones), a drift guard, and wire probes by @jcoletaylor in #970
• authz: PR 1 — the 13 Class A+B ladders and read-visibility services consume &AuthenticatedProfile by @jcoletaylor in #971
• authz: PR 2 — the Class F conditional write-gates and the Bare-site ledger consume the typed principal by @jcoletaylor in #972
• sensitivity: the scan manifest and the partition gate — every text column declared exactly once by @jcoletaylor in #973
• refactor(api): routes.rs collapses to a declarative route table; audit scripts assert the table by @jcoletaylor in #974
• erasure cut 1 (2a): vocabulary and the husk — resource_erased registered, erased_at, the region-label skip by @jcoletaylor in #975
• Single-ingress follow-on: HTTP-constructed DbBackend sites pass the proof they already hold by @jcoletaylor in #976
• feat(erasure): resource erasure cut 1 — the act, replay arm, witnesses (2b PR 1) by @jcoletaylor in #977
• fix(mcp): ttlMs/cacheScope on list results; edge-trail property events; indexed lineage walk by @jcoletaylor in #978
• Resource erasure 2b PR 2: the operator service and doors, recorded refusals, and the 410 husk read by @jcoletaylor in #979
• feat(api): isolate the system-admin routes and document them in OpenAPI by @jcoletaylor in #980
• feat(api): document the scoped operator routes in OpenAPI by @jcoletaylor in #981
• fix(authz): refuse per-row operator acts as 404, indistinguishable from a missing id by @jcoletaylor in #982
• Sensitivity sweep 3a PR A: a system-scoped job family on kb_workflow_jobs by @jcoletaylor in #983
• Resource erasure 2c: write doors refuse an erased resource with 410, checked inside the write by @jcoletaylor in #984
• release: roll the register to v0.5.4 by @jcoletaylor in #986
• oauth: Auth0-arm AS metadata advertises the instance as issuer, matching the PRM by @jcoletaylor in #985
• feat(sensitivity): the sweep's guarded store, seeded detectors and validators (3a PR B) by @jcoletaylor in #988
• mcp: steward crosses the network door via /api/steward — beat 5, the last family off the direct binding by @jcoletaylor in #989
• test(erasure): every carrier a resource reaches is handled by the erasure act or declared out of scope by @jcoletaylor in #990
• api: GET /api/contexts/resolve — context ref → id for the caller (route-first half of the network door's teardown) by @jcoletaylor in #991
• feat(sensitivity): 3a PR C1, the scan over the text surfaces by @jcoletaylor in #992
• cli: resolve context refs through GET /api/contexts/resolve by @jcoletaylor in #993
• auth: desktop_client_id on the provider entry; login() takes device-id custody from the store it is handed by @jcoletaylor in #994
• MCP teardown: context_anchor relays, the in-process gate goes, the source gate requires a relay by @jcoletaylor in #995
• Resource erasure 2e: the block history scrub by @jcoletaylor in #996
• Sensitivity sweep 3a C2: jsonb surfaces, per-path ledger remediability, derived closure by @jcoletaylor in #998
• fix(shape): an erased resource's artifact is not reconcile backlog by @jcoletaylor in #999
• mcp least privilege: temper-mcp drops its database pool; the edge becomes temper-mcp-server by @jcoletaylor in #1001
• sensitivity 3a D: the door — /api/sensitivity/sweep, the salt, the run's facts on a span by @jcoletaylor in #1000
• feat(sensitivity): a place an erasure act emptied gives up its digests after 30 days by @jcoletaylor in #1002
• feat(mcp): the tool layer relays on a host-supplied identity — IdentitySeam, RelayConfig, a second in-repo host by @jcoletaylor in #1003
• test(erasure): the facet regrain cannot re-inflate an erased resource by @jcoletaylor in #1004
• fix(erasure): block_mutate and resource_reblock take R's row before they mint by @jcoletaylor in #1005
• fix(sensitivity): payment_card v3 requires a card issuer at its length; v2's noise closes as false positives by @jcoletaylor in #1006
• mcp: the tool layer is publish-ready as temperkb-mcp by @jcoletaylor in #1007
• fix(erasure): vectors derived from an erased resource no longer outlive the act by @jcoletaylor in #1009
• feat(sensitivity): the sweep is off until an operator turns it on by @jcoletaylor in #1008
• fix(erasure): the act's record names its derived-vector writes by @jcoletaylor in #1011
• temper-client and the CLI reach every published operation; wire types in temperkb-core by @jcoletaylor in #1012
• Agent build guidance: the views rule moves in; a stale hang claim goes by @jcoletaylor in #1013
• fix(auth): CLI commands refresh an expired access token before using it by @jcoletaylor in #1014
• Hardening before 0.6.0: cron doors pinned to the deployment host, no plaintext opt-out, login names the profile by @jcoletaylor in #1015
• Release: the core bump moves every closure spec; OIDC docs name the workflow each registry checks by @jcoletaylor in #1016
• CI hardening: gate first; privileged release jobs pin every action by SHA by @jcoletaylor in #1017
• chore(release): prepare v0.6.0 by @jcoletaylor in #1021

Full Changelog: v0.5.4...v0.6.0