Releases¶

What shipped in each version of the Kysira proxy, inference sidecar, and dashboard. Dates are when the tag was cut.

v0.5.0 — July 27, 2026¶

• License-signing public key embedded at build time. The proxy image now carries its verification key from the moment it's built and it's wired into the customer Kubernetes chart — no manual key distribution step.
• Enforcement modes and rollout documented. New docs cover shadow vs. active enforcement, staged rollout, and how license keys bind to a cluster.
• WAF enforcement toggle requires an authenticated admin token.

v0.4.0 — June 26, 2026¶

• Decision-log tooling. Added a script and internal runbook for pulling and summarizing ext-proc decision logs, broken down by enforcement impact — useful when tuning thresholds after a shadow-mode run.
• Cloud Run image access documented. Agent images (proxy, inference, dashboard) and grants for Cloud Run.

v0.3.0 — June 22, 2026¶

• Internal tooling and CI reliability improvements.

v0.2.3 — June 21, 2026¶

• Security review pass across the proxy, ext-proc, and inference services.

v0.2.2 / v0.2.1 — June 20–21, 2026¶

• Licensing service. License issuance and validation updated container.
• Quickstart rewrite. Docs now cover both the Kubernetes and Cloud Run deployment paths.

v0.2.0 — June 17, 2026¶

• New detection coverage: keyless JWT abuse and insecure deserialization (OWASP A07/A08).
• Dashboard redesign. New "Defense Grid" visualization for the threat monitor, showing the live attack surface as it's scored.

v0.1.2-alpha — June 12, 2026¶

• Argus detection engine. Each verdict with the engine that made the call (Argus AI / Model / Signature).
• Tuned SSTI and SSRF detection coverage.

v0.1.1-alpha — June 10, 2026¶

• Added latency and detection metrics.

v0.1.0-alpha — June 9, 2026¶

• First alpha release.