Tags

Tags give the ability to mark specific points in history as being important

  • v0.3.0

    89819da4 · Sign releases and ship an SBOM · 
    TLS on the listener, mutual TLS, and signed releases.

The listener speaks TLS 1.2+ given a certificate and requires a verified client
certificate given a CA. A plaintext listener bound to anything but loopback is
refused at config load.

Releases are signed with keyless cosign and ship an SPDX SBOM; see
docs/verifying.md.

  • v0.2.0

    691eeac0 · Make the local disk a buffer instead of the archive · 
    Governance release.

Per-team cost attribution that AWS's own bill agrees with, redaction enforced
inside the audit log rather than at its call sites, a tamper-evident hash chain
across rotated segments with an archive hook, sealed recovery of redacted values
to a key the gateway cannot read back, OIDC single sign-on, and per-team rate,
concurrency and token limits.

Also a control mapping for security review, stating what is not done as
carefully as what is.

  • v0.1.0

    754b0e06 · Stamp the real version, and let people check redaction rules · 
    First release. LLM gateway over Bedrock and local llama.cpp behind one OpenAI-compatible endpoint, with per-team cost attribution and redacted audit logging.