Changelog

Enforcement layer: gateway and MCP wrapping mode.

• Local enforcement gateway — forward proxy that blocks requests before they leave the machine
• MCP wrapping mode — gate any upstream MCP tool server, block agent self-approval
• Fail-closed boot — gateway refuses to start without a valid policy
• Signed receipts — approved decisions carry a short-lived HMAC token for downstream verification
• Signed snapshots — tamper-evident policy + ledger state you can verify at any point

First public beta. Core authorization flow works end-to-end.

• Local-first authorization engine with policy evaluation
• Append-only JSONL decision ledger
• CLI commands: authorize, status, history, approve, deny, decision
• MCP server with authorize_action, get_decision, get_pending_approvals tools
• x402 demo integration