Changelog
- a728e24 Add Enterprise Fleet Receipt Report minting (#749)
- 0c023e7 Add Fleet Receipt Report verifier foundation (#748)
- 2f0f898 Receipt evidence: clean-A2A allow receipts + fleet-receipt conformance (#801)
- 0e5ebb2 ci: Update ci-actions to v7 (#798)
- 4d44bbf deps: Update docker-base-images (#734)
- 524e068 deps: Update docker-base-images (#764)
- 0a0c854 deps: Update docker-base-images (#777)
- fce5a64 deps: Update docker-base-images (#789)
- 03e6299 deps: Update docker-base-images (#800)
- 5ff537a deps: Update go-deps to v0.9.0 (#781)
- 9abd09a deps: Update go-deps to v1.52.0 (#793)
- 8b14341 deps: Update go-deps to v2.7.0 (#754)
- 6634a00 deps: Update k8s-images (#747)
- ca519a5 deps: Update ts-verifier to v24.13.0 (#765)
- c01c561 deps: Update ts-verifier to v24.13.1 (#787)
- 480d06e docs(metrics): complete Prometheus metric catalog (#756)
- 939f8d5 feat(cli): add 'explain' command for remediable block explanations (#750)
- c2ec807 feat(cli): add 'keys status' unified signing-key inventory (#752)
- d49fb60 feat(cli): add 'support bundle' diagnostics command (#753)
- 2c542a3 feat(cli): add 'update' self-update command (#757)
- c036238 feat(conductor): offline fleet-report export and verification (#791)
- 2e72b0f feat(conductor): operator credential and enrollment-token lifecycle (#792)
- a240b9e feat(conductor): operator recovery commands for the fleet control plane (#763)
- 1b54c20 feat(conductor): operator stream observability + publish-error clarity (#758)
- be8c25f feat(conductor): verify emergency-control signatures at all leader read paths (#776)
- 5a641c9 feat(conductor): wire follower audience labels into policy, rollback, and remote-kill apply paths (#772)
- 07621dc feat(contain): install/UX hardening for first-run and older hosts (#761)
- 2425c2e feat(contain): publishable offline containment conformance artifact with must-fail fixture (#773)
- a917feb feat(doctor): flag inert exemptions and semantic config mismatches (#751)
- 70faa8a feat(license): add 'license crl inspect' and 'license crl verify' (#762)
- 026b7f2 feat(license): gate CLI issuance on paid capability + signed service import table (#779)
- 7d2b4ba feat(license): monotonic CRL generation with consumer rollback rejection (#770)
- 19bd993 feat(license): require-intermediate enforcement, issuer-side intermediate revocation, CRL freshness (#775)
- 8f658d4 feat(mcp): defer authorization action with fail-closed resolution (#799)
- b9bdfdd feat(mcp): per-server response suppression + airlock reset for first-party tools (#774)
- 3482757 feat(playground): bundle generator + stable published orchestrator key (#795)
- 26ce17d feat(playground): gated live-chat backend (stream seam, gate, fail-closed limits, SSE server) (#802)
- 6ec8b4e feat(playground): honest live-chat demo backend (bundle, caps, trust-class) (#812)
- bbaaf4d feat(playground): honest live-chat demo for the agent firewall (#809)
- af5f0dd feat(playground): live demo engine with offline-verifiable evidence (#784)
- 9fdd1b1 feat(playground): live model-backed agent for the demo (#804)
- 1437a0f feat(playground): live-demo spend controls + polish (#807)
- 3a5423a feat(playground): split-proof contained mode with signed host-containment witness (#785)
- d7dfaab feat(receipts): freeze v1 fixtures and publish versioning policy (#755)
- 1de117a fix(chart): render valid Conductor image refs (digest vs tag) (#790)
- 3f5a7bb fix(conductor): tolerate abandoned fork siblings + offline recovery (#786)
- 49d660b fix(deps): bump Python verifier cryptography to 48.0.1 (GHSA-537c-gmf6-5ccf) (#788)
- 5236c74 fix(license): evaluate token expiry against the injected verification clock (#780)
- 4fa9952 fix(mcp): opt-in stdio response timeout + self-update downgrade warning (#810)
- 1a30205 fix(playground): harden live demo adversarial edges (#808)
- 90812be fix(proxy): make redaction config key invariant to per-agent config deep-copy (#783)
- 1413a09 fix(scanner): direction-anchor Credential Solicitation to stop documentation false positives (#760)
- b3807cd fix(scanner): fail closed on over-depth JSON and stacked URL DLP encodings (#803)
- bb33140 fix(wsutil): treat Windows Winsock close errnos as expected WS teardown (#769)
- 08538ae fix: close stacked-encoding DLP bypass, freeze receipt v1 canonical, correct dropped-action accounting (#814)
- d897e51 fix: operability, UX, and support-bundle secret-redaction fixes (#805)
- edad608 fix: verify raw action receipt chain jsonl (#771)
- f8bf755 refactor(license): extract splitToken helper and rename Decode to DecodeUnverified (#782)
- ac614ac test(certgen): make read-only-dir tests portable (#767)
- a73ce53 test(cli): make read-only-dir/config tests portable on Windows (#766)
- abce869 test(mcp): close recorder in receipt harness to fix Windows TempDir cleanup (#768)