Changelog

Changes, by version.

0.5.0
2026-11-04 · Pre-release · testnet
- The console requires wallet sign-in: opening any console page without a session leads to /login and back to that page afterwards. palisec.tech itself stays the public overview, and the console logo returns to it.
- The console shows real data only. The example-data simulation is gone; an expired session returns you to sign-in and an unreachable control plane is shown as such.
- Dashboard: 24-hour outcome chart (UTC, hourly), policy status and last activation, connectivity, and recent security events that open their exact record.
- Policy editor split into a rule builder and the generated policy, with test cases that evaluate the unsaved draft against live fee and price inputs.
- Agent detail shows owner, budget and rate limits and recent operations; operations and audit gain agent, request ID and time-range filters and deep links; approvals can be sorted.
- Sign-in returns you to the page you asked for, accepting only console paths. Console changes are rate-limited per member.
0.4.0
2026-11-04 · Pre-release · testnet
- Authorization API on Robinhood Chain Testnet (46630): POST /v1/operations records each decision with its budget reservation; POST /v1/authorizations/evaluate is a dry run. Idempotency-Key, request_id replay protection and loop cooldowns.
- Budget reservations are serialized per policy in Postgres: one SQL function re-checks budget, pending slots, replay and loop state, so concurrent requests cannot overspend. Tested with 30 simultaneous requests for one slot.
- Agents bound to a smart account and a policy, with per-agent API keys shown once and stored as SHA-256 hashes. Pause, resume and revoke.
- Policies: drafts validated against schema 1.0, activation bound to the reviewed draft's hash, immutable versions, disable.
- Human approvals signed with EIP-712 over the exact operation and policy version, re-checked against pause, emergency stop and policy changes at approval time.
- Organization emergency stop (operators engage, owners lift), members and roles enforced server-side, append-only audit API.
- Fee bound from the testnet RPC gas price; USD conversion from Coinbase with a Kraken fallback. Any missing input fails closed.
- The console reads live data when you are signed in; visitors keep the simulation. API reference and OpenAPI 3.1 at /api/v1/openapi.json.
- Not in this release: signing, bundler submission, receipt reconciliation and the on-chain account module.
0.3.0
2026-10-29 · Pre-release
- Control-plane foundation: Postgres schema with an append-only audit log, applied by versioned migrations.
- Wallet sign-in (SIWE, EIP-4361) at /login: server-issued one-time challenges bound to the domain, EOA and ERC-1271 signature verification, HttpOnly sessions with revocation and an Origin check on state changes.
- First sign-in creates an organization with the signer as owner. GET /v1/health reports which components are reachable and which are not deployed.
- Without a configured database every state-dependent endpoint fails closed with PS_STATE_001.
0.2.0
2026-10-23 · Pre-release
- Developer console as a simulation workspace: dashboard, agents, policy editor, operations, approval queue, audit, keys and circuit breakers, and organization settings.
- Console decisions come from the canonical evaluator and validator; data stays in the browser and nothing is signed or submitted.
- Policy reference gains version migration; the errors guide gains recovery procedures, RPC outages and debugging; the security model gains incident response.
0.1.0
2026-10-21 · Pre-release
- Canonical policy schema 1.0 with JSON Schema, TypeScript types and validation.
- Deterministic reference evaluator with fixed evaluation order and stable reason codes.
- Browser policy workbench running the reference evaluator on example data.
- Public site and documentation, with maturity labels on every capability.
- Added PS_REQUEST_001 for request schema failures.