v1.1.0 - Pre-execution Governance Layer

🎉 Pre-execution Governance Layer

This release introduces a comprehensive security framework for controlling LLM tool execution before it happens.

✨ New Features

Governance Components:

• Intent Classifier — Categorizes tool calls into risk categories (file read/write, network, code execution, system)
• Plan Generator — Creates execution plans with risk assessment scores
• Policy Validator — Evaluates plans against configurable rules:
  • Action policies (category-based allow/deny/require approval)
  • Resource policies (path/URL pattern matching)
  • Sequence policies (forbidden action combinations)
  • Rate policies (session-based limits)
• Approval Gate — Human-in-the-loop approval for high-risk operations
• Execution Enforcer — Validates tool calls against approved plans
• Session Manager — Tracks multi-turn conversations with rate limiting

Configuration:

• config/governance-policies.json — Policy rules
• config/intent-patterns.json — Intent classification patterns

🔒 Security Improvements

• TOCTOU race condition prevention via atomic SQL operations
• HMAC-signed plan tokens with constant-time comparison
• Atomic compare-and-swap for approval state transitions
• Session-based rate limiting

📊 Stats

• 214 new tests added (389 total)
• 9,900+ lines of new code
• 29 files changed

📖 Documentation

• Updated README with governance architecture
• Added SDD specification in .spec/specs/governance-layer/

---

Full Changelog: v1.0.1...v1.1.0