Skip to content

Release v3.0.0

Choose a tag to compare

View all tags
@xlloit xlloit released this 19 Oct 00:27
· 69 commits to main since this release
v3.0.0
f7b69e3
This commit was signed with the committer’s verified signature.
xlloit xlloyd
SSH Key Fingerprint: 3Mob4E6ZEM5UnDnZLDxdNe0atJA58GFjPXUWOb+lq5k
Verified
Learn about vigilant mode.

Features

  • WebAuthn approvals. Use browser authenticators to approve signing, decryption, and key lifecycle operations in both mono and threshold deployments.
  • Approver registry. Register signature and WebAuthn credentials, manage their metadata, and pin exact credential versions in key and authority policies. Updating metadata or registering a replacement does not change existing policies.
  • Recovery and promotion. Registered approvers and enrollment state are preserved during share recovery and mono-to-threshold promotion.
  • Discovery APIs. Read runtime configuration, discover permitted signing identities, and inspect their authority command schemas.
  • Java SDK. Added support for the new Keeper APIs and TKeeper Hub, including policies, operations, approvals, and event streams.

Changes

  • Management, the web UI, and MCP access now live in TKeeper Hub. Bundling them into Keeper made deployment and integration with existing infrastructure harder. Hub runs separately, while Keeper handles cryptographic operations and policy enforcement.
  • Approval, enrollment, and mandate responses expose expiration deadlines. Retrying does not extend an approval window.
  • The SDK approval model now supports separate signature and WebAuthn proof types. Existing SDK integrations using Approvals.Proof require an update.

Visit tkeeper.org for more details.

Assets 2
Loading