릴리스
무엇이, 언제 변경되었는가.
모든 릴리스는 버전 관리되고, 서명되며, 소프트웨어 자재 명세서가 함께 제공됩니다 — 무단 변경 없음, 비공개 수정 없음. 이 페이지는 첫 번째 공개 릴리스를 시작으로 각 버전에서 릴리스되는 내용을 기록합니다.
-
v26.8.0
First public release
One self-hosted Go binary to run and govern the AI agents you already use — durable work items with fenced leases, four deny-closed enforcement points, a read/write access map with permitted-vs-observed drift, and a hash-chained, signed audit ledger.
GitHub에서 릴리스 보기추가- Work plane: durable work items, fenced leases (acquire, renew, release, take over, revoke), launch-for-work and A2A delegation to authorized peers with durable receipts; messages with acknowledgements scoped to an orchestration workflow.
- Governance: Cedar authorization (RBAC + deny-overlay + scoped grants), four deny-closed enforcement points — the Claude Code PreToolUse/PostToolUse hook, an inline /v1/messages inference proxy, an MCP tools/call gate and an A2A delegation gate — two-person approvals, break-glass with dual control and an estate kill-switch.
- Evidence: append-only, hash-chained audit ledger with Ed25519-signed checkpoints; exports to CEF, LEEF, syslog, OTLP and OCSF; push to Splunk HEC, Microsoft Sentinel, Datadog, New Relic and HMAC webhooks; 26 compliance framework catalogs.
- Integrations: 30 modules and 158 integrations — Claude Code at the hook, Codex and Grok Build as first-class command surfaces, gemini-cli, Cursor, opencode, goose, cline, OpenHands, OpenClaw and Hermes as connectors, each stating what it can enforce versus only observe.
- Modules named for the roadmap, all in the community binary with no license check: the MCP catalog and admission (approved agents, MCP servers, skills and templates, MCP admission policies) with the MCP introspection source and the MCP tools/call gate; FinOps budgets that deny or throttle spend, live in the default binary with no provisioning; compliance evidence mapping over 26 framework catalogs with sealed, exportable evidence.
- Distribution: signed archives for linux/darwin (amd64/arm64, FIPS builds alongside), .deb/.rpm/.apk packages with a hardened systemd unit, multi-arch container images on Docker Hub and GHCR (with -fips and -stig variants), a Homebrew cask and a one-command verified installer.
보안- The checksums manifest and the container image are cosign-signed (keyless); archives carry SPDX and CycloneDX SBOM attestations plus OpenVEX statements, and the set carries SLSA build provenance; scripts/verify-release.sh verifies what it recognizes and says what it skipped, offline if you prefer.
- No mandatory telemetry and no control-plane egress by default; license validation is offline; the one vendor call is olivares upgrade, and --endpoint points it at your own mirror.