Changelog
Version history
Milestones as documented in the project. Status badges reflect the project's own claims: verified, implemented, partial, experimental, planned.
v0.9 — JWT context
- Optional JWT context (
AXIS_JWT_REQUIRE_VALID_JWT=falsedefault): JWT-derived identity can feed policy context; off by default, does not replace the v1 honesty model. - Controlled policy reload is internal-only and disabled by default (
AXIS_ENABLE_POLICY_RELOAD=false); no HTTP reload endpoint. - Evidence signing and verified endpoints remain available; v0.9 stays a pilot-grade control layer.
v0.8 — Policy lifecycle hardening
- Policy lifecycle with candidates, activation and rollback; operator-token gating (
AXIS_OPERATOR_TOKEN). - Manifest-authoritative startup with expected SHA-256; invalid policy prevents healthy startup.
- Validate, diff and dry-run endpoints (read-only, no side effects).
- Approvals do not expire on policy rollback; retries re-evaluate under the then-active policy.
v0.7 — Evidence and approvals
- Approval workflow: pending/expired/resolved(approve|reject), immutable resolution, explicit retry with
approval_id. - Evidence Bundle V1 export with optional Ed25519 signing;
/audit/evidence,/audit/verify,/evidence/verify. - Audit derived index V1 (
audit_index_v1.json), safe to delete and rebuild.
v0.6 — Pilot Readiness
- Milestone: controlled demos, local review, non-production pilot; explicitly not compliance-certified production.
- Real-driver matrix verified: psycopg3, asyncpg, Prisma, pgJDBC single-statement (37 tests each, 2026-07-05).
- Reviewer and production-like stacks; Control Plane real mode reads live endpoints.
v0.5 — Operating modes and runtime hardening
- Operating modes: shadow, approval_first, enforce, emergency_bypass (
AXIS_OPERATING_MODE); no silent bypass. - Runtime hardening: rate limits, size limits, timeouts, pool limits; runtime stats endpoint.
- Audit restart tests; evidence continuity validated across restarts.
v0.4 — Hardened core (2026-05-10)
- SQL Classification Contract v1.0 (ACTIVE – Locked, effective 2026-08-07): QueryType + mandatory risk signals, fail-closed ambiguity rules, CI-enforced mutation tests.
- Fail-closed startup chain: WAL continuity, manifest validation, policy hash, activation dry-run corpus.
- Prepared statement session store with fail-closed EXECUTE.
Planned (not shipped)
| Item | Status | Notes |
|---|---|---|
Extended Query (P/B/E) on the wire path | Planned | EQ0–EQ5; required before OLTP pilot |
| mTLS completion and review | Planned | Production review gate |
| RBAC / SSO | Planned | Multi-person approval when required |
| KMS-backed key management | Planned | Replaces local SHA-256 trust |
| External ledger anchoring | Planned | Beyond local hash chain |
| Multi-AXIS / distributed deployments | Planned | v1 guarantee is local and process-bound |
Native PG wire RFC history
- Draft RFC v1.2 (2026-05-21): Simple Query intercept enforced in lab; Extended Query design; COPY fail-closed.
- RFC-032: CancelRequest (
F) implemented in the lab listener; unknown cancel keys rejected. - Lab results: regression 65/65, chaos 14/14 (wire path); these are POC results, not production certification.
Documentation revision notes
- Classification contract v1.0 effective 2026-08-07 — deviations are Critical Security Defects.
- This site reflects the project documentation as of the latest reviewed revision; always cross-check version numbers against the repository changelogs.
Related: Overview · Limitations · Pilot