62 Releases 63 Tags

RSS Feed

• v2.3.0 4ab4f9fa90

  Compare

  v2.3.0 Stable

  john-okeefe released this 2026-10-29 13:32:15 -04:00 | 0 commits to main since this release

  Bug Fixes

  • (test) Rls fixture — reuse declared err variable (004d419)
  • (devices) Device deletion detaches reading history instead of 500ing (d49a9e6)
  • (compose) Drop vestigial uploads mount from db service (ab4bddc)

  Documentation

  • (env) DBSRVPASS in .env.example — the runtime role password (1457dc7)
  • (agents) Family-lens enforcement moves to RLS — one source (efbe312)
  • (readme) Prod install without a repo clone — copyable compose (de26544)
  • (readme) Sync quickstart compose block to docker-compose.yml verbatim (cf73eec)
  • (readme) Reconcile quickstart block post-inline-bootstrap (4ab4f9f)

  Features

  • (db) Dedicated non-superuser runtime role for RLS (cb258b6)
  • (db) RLS library-visibility enforcement — invariant GREEN (922b92a)
  • (scanner) Background jobs declare acting identity for RLS (385a5d9)
  • (scanner) Scanner entrypoints + generic jobs carry RLS identity; SeedDB harness fallback (bb2cc26)
  • (deploy) Db-init one-shot service — paste-and-go bootstrap for the runtime role (313268a)
  • (deploy) Inline bootstrap into db-init — compose is the single source; DB_PORT everywhere (304ea95)

  Other

  • (rls) ScopedDB + rls package + schema policies + echo bridge [pin compiling state] (f4b5818)
  • (rls) Engine-side fail-loud + harness seed identity [pin: work interrupted] (8c3d919)

  Tests

  • (visibility) Black-box invariant — hidden library absent from every surface (3dcb794)
  • (visibility) Fixture fixes from first live runs (a19d7a4)
  • (visibility) Full suite green under RLS — sync paths, device-auth bridge, seed pool (4d697f5)
  • (ui) Playwright RLS sweep — real-browser proof, both personas (f579696)

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)