release: v0.1.1

[github-actions]

🤖 I have created a release beep boop

0.1.1 (2026-02-04)

Features

• AccountStore, VaultStore (550820f)
• add authzen properties entity (26a62fa)
• add Forbid policy support (d1e0258)
• add FoundationDB storage baackend (6da883c)
• add gRPC reflection (395d06d)
• add ledger-back signing key support (46d9465)
• add proto git submodule (a97cad2)
• add scope constants (bd7a104)
• add Simulate to gRPC API (fdac2f2)
• add startup config output (07999d9)
• add terraform (fe483b5)
• add Watch API (91a7139)
• appstate optimizations (057466c)
• audit logging (1c7fdb1)
• auth: add authentication layer (4c7ba67)
• auth: add jwks caching and control plane fetch (c5cee05)
• auth: axum middleware (141e788)
• auth: gRPC authentication (4770c8c)
• auth: JWT authentication support (bbde19c)
• AuthN API handler updates (9caa975)
• AuthN middleware (ed5c604)
• AuthN middleware (5652417)
• AuthZEN adapter (98af604)
• AuthZEN evaluation APIs (dd914bb)
• AuthZEN request validation (0b3cde8)
• AuthZEN resource search API (b4eb724)
• AuthZEN response formatting (9da6a80)
• AuthZEN subject search API (0e0fa42)
• change feeds, user wildcards (cb62047)
• check evaluation engine (a5ea3ba)
• client assertion and JWKS validation improvements (1a228b5)
• config hot reloading (26c9e32)
• config improvements (e957001)
• config improvements (922903b)
• config improvements (96d71ee)
• config syntax improvements (e5e3de4)
• configuration improvements (ba19436)
• delete relationship api (639a0f3)
• distributed replication improvements (44af482)
• docker image, healthcheck endpoints (6e1550b)
• dynamically adapt to configuration changes (2b2749d)
• enable JWT expiration validation (dcb1040)
• enhance caching (73a7cc1)
• Evaluate API enhancements (74687af)
• expand enhancements (7a98bdc)
• expand evaluation engine (7e46fc0)
• expand metrics collection, dashboards (c6da0a8)
• filtered DeleteRequest (bc9baa9)
• flag simulation and streaming extensions as available (3d11f7c)
• foundationdb improvements (464594b)
• get relationship API (8bbc665)
• graceful shutdown signal handling (4a5187b)
• gRPC API (0afb658)
• grpc auth (f38a6f4)
• helm chart (7dcc33a)
• helm chart (1b49277)
• helm charts, k8s deployment config (b9e3b67)
• improve startup config validation (4e17657)
• improvements to start up logging (ac36dc6)
• in-memory storage (a4c9e9e)
• initialize default vault/account (c9193e9)
• intermediate result cache (4a565be)
• JWKS validation improvements (bdf1ac5)
• k8s healthz endpoints (dce1e3e)
• kubernetes discovery (2b41113)
• Kubernetes manifests (6609412)
• ledger migration (d47a88e)
• ListRelationships endpoint (9997fd1)
• ListResources endpoint (a6f6cb8)
• ListSubjects API (5c4a31f)
• load balancing, health tracking, circuit breaker (8397da0)
• logging (54191c3)
• Management APIs (cc2ef1b)
• migrate shared types into internal crate (ebb5afe)
• new server-to-server isolation layer (bd615b8)
• oauth metrics (724eee6)
• oauth tracing and metrics enhanvements (3900456)
• oidc discovery (b2572ee)
• org suspend/resume, JWKS improvements (3833a67)
• parallel branch expansion (5710637)
• Policy Language Parser (66819e1)
• policy validation, static analysis (c6edf7a)
• query optimizations (38319dd)
• rate limiting, streaming (06e18a3)
• RelatedObjectUserset replaces TupleToUserset (5eaefe8)
• RelatedObjectUserset replaces TupleToUserset (d9deee6)
• remove obsolete tls_enabled config flag (7b41f84)
• replication (9581c03)
• replication (a68645d)
• replication agent improvements (e3fce61)
• REST endpoints (b7fbe26)
• s2s webhook expansion (5288c92)
• s2s webhook expansion (0ae2e7a)
• secrets management (7679686)
• security hardening (5738693)
• security hardening (5def045)
• security hardening (41a0d94)
• selective cache invalidation (3e5555c)
• service discovery improvements (af5f1c6)
• service discovery improvements (7c1c3e8)
• services cleanup (a48c0ad)
• services cleanup (2dcde6f)
• services cleanup (48fafab)
• set up project (dbaec9e)
• simplify helm chart structure (2787e22)
• snapshot support (ba1eefb)
• storage migration (f4fc2bf)
• storage: WASM enhancements, graph traversal prefetching, metrics (2dd3ee7)
• stream Check (BatchCheck) endpoint (896325a)
• stream DeleteRelationships API (9020c36)
• stream Expand endpoint (31d3d3b)
• stream ListResources endpoint (97d898f)
• stream ListResources endpoint (d75925d)
• structured logging (3020f5a)
• support TOON response formats (e9b0797)
• tailscale cross-cluster discovery (bddfb47)
• TOON support (8f9f1f1)
• TOON support (9d564b1)
• TOON support (92550a0)
• TOON support (2d606d6)
• tracing (aed5358)
• update crate name prefixes (a1ec2cd)
• update proto (f0db785)
• update protobuffer (369d810)
• update startup logging (16f2fa1)
• validate auth configuration (96ea309)
• Vault assignment (9de8759)
• vault-cache invalidation (9fbdf15)
• vault-cache invalidation tests (147625f)
• WASM sandboxing (2b5496f)
• Wildcard subject support and validation to relationships (bc61fe7)
• WriteRelationships API (07c46dc)
• WriteRelationships API (48cc840)

Bug Fixes

• chrono import (33ba0ab)
• downgrade prost (37338f8)
• k8s healthz status (4c09ee5)
• linter warning (f15f24d)
• skip coverage builds for PRs (c4173f8)
• temporarily disable Azure and GCP secrets managers (904c40c)
• test and linter fixes (fd48512)
• update AuthZEN routes (dbe008a)
• use awls_lc_rs cryptolibrary for rustls (8e7501d)
• use internal management JWKS endpoint (a9e3c3f)

Improvements

• add github templates, labeler, stale (464021a)
• add prettier (1e981f7)
• dev tooling improvements (07ef0a8)
• dev tooling improvements (2f7f476)
• dev tooling improvements (4ac9b79)
• env var name updates (c1bd983)
• improve dev workflow (8f5ab6e)
• improve dev workflow (b4773a6)
• k8s config improvements, helm improvements (da4e66a)
• Makefile improvements (992b179)
• min rust runtime version consistency in manifests (000ff78)
• replace mise tasks with Makefile (c406430)
• serena memories (b9fdc30)
• tooling updates (945d726)
• tooling updates (043d344)
• update agent context files (d3dab4b)
• update CLAUDE.md (4d0136a)
• update dev workflows (2aa33c2)
• update helm, k8s and prometheus (b3c6891)
• update k8s management service identity (4a210a2)
• update msrv (f7dfd7d)

---

This PR was generated with Release Please. See documentation.