v1.1.0 — Policy-driven routing & production safety

Highlights

Policy-driven architecture

• configs/routing.yml — YAML-based multi-route definitions
• configs/policies/{auth,payment,admin}.yml — per-route policy files
• app/routing/service.py — route resolver (longest-prefix-first)
• app/policies/service.py — policy loader with typed dataclasses

Per-route enforcement

• SchemaEnforcementMiddleware — JSON schema validation per route
• AuthMiddleware — JWT/API key configurable per policy
• RateLimitMiddleware — per-route rate limits
• Decision actions: allow / monitor / throttle / block

Production safety

• scripts/backup.sh — pg_dump + config + log backup (30-backup retention)
• scripts/restore.sh — DB + config restore with service lifecycle
• DEPLOYMENT_STATES.md — INSTALL → SETUP → MONITOR → ENFORCE → ROLLBACK
• GO_LIVE_CHECKLIST.md — 47 items (infra, product, security)
• minifw-ai.service — systemd unit with full sandboxing
• HSTS enabled in nginx.conf

Packaging & release

• .deb includes routing/policy configs as conffiles
• Dockerfile, Docker Compose, Helm chart updated
• scripts/release.sh — automated release workflow
• pyasn1 CVE-2026-30922 patched

Install

sudo dpkg -i ritapi-advanced_1.1.0_amd64.deb
sudo apt-get install -f

See CHANGELOG.md for full details.