v0.2.9 — Hardening release, cross-cloud E2E, coset 0.4

Highlights

• Cross-cloud E2E validated: AWS Nitro, GCP CPU TDX, GCP GPU H100 CC — all pass with AIR v1 receipts
• Model alias fix: GCS-KMS manifest model ID now correctly aliases to CLI model ID (stage-0)
• Security profile compatibility: Internal channels use Development profile as a compatibility fix for transport v0.5.0's fail-closed default
• Dependencies: transport v0.5.0 (fail-closed, TDX DCAP), pipeline v0.4.0 (fail-closed, tensor zeroization), coset 0.4.2

What's Changed

Features & Fixes

• Register model alias for manifest ID vs CLI ID compatibility
• Use Development security profile for one-way attestation model (compatibility fix)
• Gateway rate limiting + buffered SSE streaming
• Reconnect/backoff strategy for gateway

Dependencies

• confidential-ml-transport v0.5.0 (SecurityProfile::Production fail-closed, TDX DCAP complete)
• confidential-ml-pipeline v0.4.0 (fail-closed measurement pinning, tensor metadata zeroization)
• coset 0.3 → 0.4 (COSE header crit field supports private-use labels)
• tokio 1.49 → 1.50, clap 4.5 → 4.6, openssl 0.10.75 → 0.10.76
• Docker Actions: login-action v3→v4, build-push-action v6→v7

Evidence

• 629 workspace tests passing
• 16/16 compliance rules (GPU), 15/16 (CPU — FRESH-001 time-sensitive)
• 2/2 negative tests (wrong hash, wrong KMS key)
• 10/10 AIR v1 golden vectors

Tags

• hardening-v050-validated — validated E2E state with evidence

Full Changelog: v0.2.8...v0.2.9

What's Changed

• release: v0.2.9 — CPU/GPU load tests, model reuse, --count flag by @tsyrulb in #31
• feat(cli): native ephemeralml gcp workflow with fail-closed preflight by @tsyrulb in #32
• security: dependency audit, risk register, CI hardening by @tsyrulb in #39
• chore(deps): bump anyhow from 1.0.101 to 1.0.102 by @dependabot[bot] in #35
• chore(deps): bump clap from 4.5.59 to 4.5.60 by @dependabot[bot] in #37
• chore(deps): bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #33
• chore(deps): bump actions/download-artifact from 4 to 7 by @dependabot[bot] in #34
• chore(deps): upgrade jsonwebtoken 9 → 10 with aws_lc_rs backend by @tsyrulb in #40
• chore(deps): migrate reqwest 0.12 → 0.13 by @tsyrulb in #41
• chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #82
• chore(deps): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in #81
• chore(deps): bump chrono from 0.4.43 to 0.4.44 by @dependabot[bot] in #84
• chore(deps): bump axum-test from 16.4.1 to 18.7.0 by @dependabot[bot] in #83
• chore(deps): bump openssl from 0.10.75 to 0.10.76 by @dependabot[bot] in #96
• chore(deps): bump clap from 4.5.60 to 4.6.0 by @dependabot[bot] in #95
• chore(deps): bump aws-types from 1.3.13 to 1.3.14 by @dependabot[bot] in #93
• chore(deps): bump tokio from 1.49.0 to 1.50.0 by @dependabot[bot] in #92
• chore(deps): bump aws-sdk-kms from 1.102.0 to 1.103.0 by @dependabot[bot] in #91
• chore(deps): bump axum-test from 18.7.0 to 19.1.0 by @dependabot[bot] in #90
• chore(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #86
• chore(deps): bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #85
• chore(deps): bump coset from 0.3.8 to 0.4.2 by @dependabot[bot] in #88
• chore(deps): bump aws-config from 1.8.14 to 1.8.15 by @dependabot[bot] in #87
• chore(deps): bump uuid from 1.21.0 to 1.22.0 by @dependabot[bot] in #89

Full Changelog: v0.2.8...v0.2.9

v0.2.8

Full Changelog: v0.2.7...v0.2.8

v0.2.7

Full Changelog: v0.2.6...v0.2.7

v0.2.6

Full Changelog: v0.2.5...v0.2.6

Full Changelog: v0.2.5...v0.2.6

v0.2.5

What's Changed

• feat: verifier API hardening — auth, rate limiting, policy parity by @tsyrulb in #30

Full Changelog: v0.2.4...v0.2.5

v0.2.4

What's Changed

• feat: CLI UX overhaul with structured output, color, ghost mascot by @tsyrulb in #27
• fix: CS transport trust hardening + JWKS verification by @tsyrulb in #28
• release: v0.2.4 — clippy fixes, stale doc cleanup, version bump by @tsyrulb in #29

Full Changelog: v0.2.3...v0.2.4

v0.2.3

What's Changed

• CS transport trust + dependency reduction by @tsyrulb in #26

Full Changelog: v0.2.2...v0.2.3

v0.2.2

Full Changelog: v0.2.1...v0.2.2

v0.2.1

What's Changed

• chore(deps): bump actions/cache from 4 to 5 by @dependabot[bot] in #1
• chore(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2
• chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #3
• chore(deps): bump tokenizers from 0.21.4 to 0.22.2 by @dependabot[bot] in #6
• chore(deps): bump aws-config from 1.8.12 to 1.8.13 by @dependabot[bot] in #8
• chore(deps): bump aws-sdk-s3 from 1.120.0 to 1.121.0 by @dependabot[bot] in #9
• chore(deps): bump anyhow from 1.0.100 to 1.0.101 by @dependabot[bot] in #10
• chore(deps): bump reqwest from 0.11.27 to 0.13.1 by @dependabot[bot] in #12
• chore(deps): bump x509-parser from 0.15.1 to 0.18.1 by @dependabot[bot] in #13
• chore(deps): bump aws-config from 1.8.13 to 1.8.14 by @dependabot[bot] in #21
• chore(deps): bump aws-sdk-kms from 1.98.0 to 1.99.0 by @dependabot[bot] in #20
• chore(deps): bump clap from 4.5.55 to 4.5.58 by @dependabot[bot] in #25

New Contributors

• @dependabot[bot] made their first contribution in #1

Full Changelog: v1.0.0...v0.2.1

What's Changed

• chore(deps): bump actions/cache from 4 to 5 by @dependabot[bot] in #1
• chore(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2
• chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #3
• chore(deps): bump tokenizers from 0.21.4 to 0.22.2 by @dependabot[bot] in #6
• chore(deps): bump aws-config from 1.8.12 to 1.8.13 by @dependabot[bot] in #8
• chore(deps): bump aws-sdk-s3 from 1.120.0 to 1.121.0 by @dependabot[bot] in #9
• chore(deps): bump anyhow from 1.0.100 to 1.0.101 by @dependabot[bot] in #10
• chore(deps): bump reqwest from 0.11.27 to 0.13.1 by @dependabot[bot] in #12
• chore(deps): bump x509-parser from 0.15.1 to 0.18.1 by @dependabot[bot] in #13
• chore(deps): bump aws-config from 1.8.13 to 1.8.14 by @dependabot[bot] in #21
• chore(deps): bump aws-sdk-kms from 1.98.0 to 1.99.0 by @dependabot[bot] in #20
• chore(deps): bump clap from 4.5.55 to 4.5.58 by @dependabot[bot] in #25

New Contributors

• @dependabot[bot] made their first contribution in #1

Full Changelog: v1.0.0...v0.2.1

What's Changed

• chore(deps): bump actions/cache from 4 to 5 by @dependabot[bot] in #1
• chore(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2
• chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #3
• chore(deps): bump tokenizers from 0.21.4 to 0.22.2 by @dependabot[bot] in #6
• chore(deps): bump aws-config from 1.8.12 to 1.8.13 by @dependabot[bot] in #8
• chore(deps): bump aws-sdk-s3 from 1.120.0 to 1.121.0 by @dependabot[bot] in #9
• chore(deps): bump anyhow from 1.0.100 to 1.0.101 by @dependabot[bot] in #10
• chore(deps): bump reqwest from 0.11.27 to 0.13.1 by @dependabot[bot] in #12
• chore(deps): bump x509-parser from 0.15.1 to 0.18.1 by @dependabot[bot] in #13
• chore(deps): bump aws-config from 1.8.13 to 1.8.14 by @dependabot[bot] in #21
• chore(deps): bump aws-sdk-kms from 1.98.0 to 1.99.0 by @dependabot[bot] in #20
• chore(deps): bump clap from 4.5.55 to 4.5.58 by @dependabot[bot] in #25

New Contributors

• @dependabot[bot] made their first contribution in #1

Full Changelog: v1.0.0...v0.2.1