v0.1.3

What's Changed

• Bump pinned auths-version to 0.1.1 in CI verification by @bordumb in #251

Full Changelog: v0.1.2...v0.1.3

v0.1.2

Full Changelog: v0.1.1...v0.1.2

v0.1.1

What's Changed

• feat(crypto): complete curve-agnostic refactor by @bordumb in #176
• refactor: final crypto curve sweep and automated checks by @bordumb in #179
• feat: wire anchor_and_persist through AtomicWriteBatch by @bordumb in #186
• feat: wire anchor_and_persist through AtomicWriteBatch by @bordumb in #187
• fix(security): replace 3 non-constant-time byte comparisons with subtle::ct_eq by @bordumb in #188
• fix: witness receipt submission through anchor pipeline by @bordumb in #189
• refactor: KEL integrity hardening - TOCTOU lock, validated replay, CESR signatures, anchor discipline by @bordumb in #190
• Dev pairing hardening by @bordumb in #191
• build/fix: consolidate CI resources to optimize wall time, fix LAN pairing dropping early by @bordumb in #195
• feat: add mobile ffi hardening at pairing boundaries by @bordumb in #196
• Dev mobile ffi hardening by @bordumb in #197
• Dev keri compliant devices by @bordumb in #230
• refactor - agent passport, keyless service by @bordumb in #245
• GTM first-run fixes: demo unblock, command-drift kill, package renames, release plumbing by @bordumb in #248

Full Changelog: v0.0.1-rc.12...v0.1.1

v0.0.1-rc.12

What's Changed

• docs: docs refresh by @bordumb in #144
• feat: make node sdk have signing parity with python sdk by @bordumb in #145
• feat: add raw-key artifact signing to python and node sdks by @bordumb in #146
• feat: add signed commit_sha to artifact attestations by @bordumb in #147
• feat: general cleanup of CLI errors and moving artifact to main command by @bordumb in #149
• Dev bug cli format clash by @bordumb in #150
• refactor: replace old 3-secret ci-setup with single AUTHS_CI_TOKEN across workflows, docs, justfiles, and templates by @bordumb in #151
• refactor: replace 130-line sign-commits workflow with auths-dev/sign@v1 action by @bordumb in #152
• build: replace sign ci by @bordumb in #153
• refactor: move all auths-* imports from cli to sdk by @bordumb in #156
• Dev ci setup delete by @bordumb in #158
• Dev cli hardening by @bordumb in #159
• refactor: get rid of KERI implementation details from CLI layer by @bordumb in #161
• docs: focus cicd docs on github actions by @bordumb in #162
• docs/tests: add agent examples, fix cli flags in tests by @bordumb in #163
• refactor: centralize all KERI protocol logic into auths-keri by @bordumb in #164
• refactor: migrate to spec-compliant KERI by @bordumb in #165
• feat: add pluggable transparency log port with Rekor v1 adapter, ECDS… by @bordumb in #166
• feat: Apple Enclave fingerprint working by @bordumb in #173
• Dev curve agnosticism114 by @bordumb in #174

Full Changelog: v0.0.1-rc.11...v0.0.1-rc.12

v0.0.1-rc.11

What's Changed

• docs: add verify widget to readme by @bordumb in #127
• feat: add missing doctor checks: git version minimum, user.name/email… by @bordumb in #128
• fix: delegate SetupError/DeviceError storage and registration variant… by @bordumb in #129
• feat: add auths reset command to remove ~/.auths and unset git signin… by @bordumb in #131
• tests: add golden path tests for auths init by @bordumb in #132
• feat: add cli autocompletions by @bordumb in #133
• refactor: make init simpler by auto populating .auths/ in repo and removing registration as default by @bordumb in #134
• build: bump various cargo crate versions by @bordumb in #135
• refactor: clean registry print statements from init by @bordumb in #136
• refactor: simplify python sdk for launch, docstrings by @bordumb in #137
• refactor: make init profile outputs consistent by @bordumb in #138
• refactor: simplify cli help by @bordumb in #139
• docs: fix 404 on doc pages and automate gen-docs for cli by @bordumb in #140

Full Changelog: v0.0.1-rc.10...v0.0.1-rc.11

v0.0.1-rc.10

What's Changed

• feat: auto-update Homebrew formula on release by @bordumb in #93
• Dev build fixes by @bordumb in #96
• fix: correct org functions for onboarding by @bordumb in #97
• feat: new namespace ports adapters by @bordumb in #99
• feat: add capsec audit to pre-commit hooks and CI by @bordumb in #100
• fix: enable baseline diff on push events for dirty crates audit by @bordumb in #101
• feat: add ownership check on package claiming by @bordumb in #105
• feat: add claims for npm by @bordumb in #106
• feat: add pypi claims by @bordumb in #108
• feat: fix passphrase fatigue by wiring OS keychain caching into all CLI commands by @bordumb in #112
• feat: make single sign publishing work by @bordumb in #113
• feat: add AssuranceLevel to show how trustworthy each platform claim is by @bordumb in #114
• refactor: rename key aliases by @bordumb in #115
• refactor(cli): dx improvements by @bordumb in #116
• feat: automatically upload SSH signing keys to GitHub by @bordumb in #117
• feat: complete OIDC machine identity commit signing dogfooding by @bordumb in #120
• feat: add auths-api to expose agent id setup by @bordumb in #121
• refactor: organize auths-sdk into domain directory by @bordumb in #122
• refactor: centralize workflows to sdk by @bordumb in #124
• docs: add docs by @bordumb in #125
• feat: automate artifact release attestation by @bordumb in #126

Full Changelog: v0.0.1-rc.9...v0.0.1-rc.10

v0.0.1-rc.9

What's Changed

• feat: add stubs for environment policies by @bordumb in #53
• refactor: rip out monolithic auths-cli features in auths-sdk by @bordumb in #54
• refactor: extract pairing daemon from auths-cli and auths-pairing-protocol by @bordumb in #55
• docs: add python PyPi releases CI and docs by @bordumb in #56
• feat: add full identity lifecycle for auths-python by @bordumb in #57
• docs: sdk docs automation by @bordumb in #58
• docs: replace custom rustdocs with official links by @bordumb in #59
• feat: adds auths-node SDK to mirror auths-python by @bordumb in #60
• docs: add auths-node sdk docs by @bordumb in #61
• fix: correct tilde expansion bug for ~/.auths and other paths by @bordumb in #62
• feat: add auths signers commands piped from auths-sdk -> auths-cli -> python/node SDKs by @bordumb in #63
• fix: correct insta snapshot filename and add --no-fail-fast to CI by @bordumb in #64
• fix: update quinn-proto 0.11.13 -> 0.11.14 (RUSTSEC-2026-0037) by @bordumb in #65
• feat: add ports and adapters for auths-telemetry by @bordumb in #66
• fix: use standard auths layout as CLI default, not radicle by @bordumb in #67
• refactor: cleanup for full demo in example-python-sdk-enterprise repo by @bordumb in #72
• feat: dogfood auths badge by @bordumb in #75
• fix: add more precise link on badge by @bordumb in #76
• refactor: sans IO architecture and clippy enforcement by @bordumb in #83
• refactor: strengthen DID typing by @bordumb in #84
• refactor: strengthen typing by @bordumb in #85
• feat: structured error messages by @bordumb in #86
• feat: add robust error messaging and docs by @bordumb in #87
• chore: lint sync guard, WitnessConfig versioning, new_unchecked audit, error boundary fixes by @bordumb in #88
• refactor: make expires_in standard across all locations by @bordumb in #89
• feat: add support for C2SP tlog-tiles for public registry by @bordumb in #90
• refactor: cleanup for cold start problem by @bordumb in #91
• build: bump v for rc.9 by @bordumb in #92

Full Changelog: v0.0.1-rc.8...v0.0.1-rc.9

v0.0.1-rc.8

What's Changed

• fix: eliminate panics and enforce unwrap/expect lints workspace-wide by @bordumb in #25
• feat: OIDC-to-Policy bridge and Trust Registry by @bordumb in #26
• feat: schema stability, batch git storage, and pairing protocol extraction by @bordumb in #27
• feat: PKCS#11 HSM backend + Python E2E test system by @bordumb in #28
• fix: resolve 25 E2E test gaps — 10 pass → 31 pass by @bordumb in #30
• feat: add auths-mcp-server integration tests and cleanup by @bordumb in #31
• feat: unified auths-python SDK with identity lifecycle by @bordumb in #32
• feat(python): Python SDK advanced lifecycle & semantic naming (fn-25) by @bordumb in #33
• feat: advanced enterprise features (fn-26-30) by @bordumb in #34
• refactor: tear out CLI business logic into SDK and http infra crates by @bordumb in #35
• feat(auths-python): publish_artifact and generate_allowed_signers by @bordumb in #36
• feat(auths-sdk,auths-core,auths-cli): stabilize core architecture & error boundaries by @bordumb in #37
• feat: code safety — unwrap/anyhow removal (fn-34) by @bordumb in #38
• refactor(auths-sdk,auths-cli): API surface — initialize(), rename SDK functions by @bordumb in #39
• feat: native commit verification in Rust (fn-36) by @bordumb in #40
• feat: structured error codes across FFI/WASM/Python boundaries by @bordumb in #41
• fix: clock injection, typed errors, and missing Python imports by @bordumb in #42
• fix(auths-cli): rename global --output to --format by @bordumb in #43
• refactor: security hardening by @bordumb in #44
• refactor: simplify CLI and SDK interfaces by @bordumb in #45
• feat: verification via SAS and transport encryption for device pairing by @bordumb in #46
• fix: clean up auths --help and rewrite CLI README by @bordumb in #47
• feat: add auths pair as a top-level command by @bordumb in #48
• docs: add CLI commands section to mkdocs nav by @bordumb in #49
• docs: add full descriptions to CLI docs by @bordumb in #50
• feat: working demo with radicle by @bordumb in #51
• release: release candidate 8 by @bordumb in #52

Full Changelog: v0.0.1-rc.7...v0.0.1-rc.8

v0.0.1-rc.7

Full Changelog: v0.0.1-rc.6...v0.0.1-rc.7

v0.0.1-rc.6

Full Changelog: v0.0.1-rc.5...v0.0.1-rc.6