Sidian Labs

Ecosystem changelog.

Development history across the Sidian Labs ecosystem, newest first.

Entries

  1. MAPDocumentationv0.1.0

    README status aligned with released v0.1.0

    README updated from "developer preview" to "released v0.1.0" to match the npm package. Released ≠ mature ≠ standardized.

    commit npm
  2. MAPDocumentation

    Added NON-GUARANTEES.md and BENCHMARKS.md

    Project-specific non-guarantees and benchmark reproducibility documentation.

    commit NON-GUARANTEES.md
  3. OVARADocumentation

    Added NON-GUARANTEES.md and BENCHMARKS.md

    Project-specific non-guarantees (identity, surfaces, performance, hardening, receipts) and benchmark reproducibility documentation.

    commit NON-GUARANTEES.md BENCHMARKS.md
  4. DASHDocumentation

    Added NON-GUARANTEES.md

    Project-specific non-guarantees documenting provenance vs truth, production readiness, scale, and security limitations.

    commit NON-GUARANTEES.md
  5. POLICY.mdDocumentation

    Added NON-GUARANTEES.md

    Project-specific non-guarantees documenting enforcement, adapter coverage, and maturity limitations.

    commit NON-GUARANTEES.md
  6. POLICY.mdChanged

    Renamed .policies to .policy

    Renamed .policies to .policy to match the new documentation structure.

    commit
  7. SidianRelease

    Sidian confirmed as live beta product

    Sidian is live at sidian.dev (HTTP 200). No public repository; internals cannot be independently inspected. Product claims cannot be verified from source.

    sidian.dev
  8. DASHAddedPR #18

    M11 production-readiness: CMEK, SOC 2, OIDC, RBAC (PR #18)

    CMEK core and SOC 2 readiness package. OIDC/JWKS and RBAC role enforcement.

    PR #18
  9. DASHInfrastructure

    Deploy control-plane through Helm chart

    Helm chart for control-plane deployment.

    commit
  10. DASHAdded

    Object-storage backup/restore via S3

    S3-based backup and restore support.

    commit
  11. DASHAdded

    Replication lag guard for quorum replication SLO

    Replication lag guard to maintain quorum replication SLO.

    commit
  12. DASHAdded

    Control-plane leader election

    Vector DB maturity comparison and control-plane leader election.

    commit
  13. DASHFixed

    P0/P1 production-readiness fixes

    Complete P0/P1 production-readiness fixes.

    commit
  14. DASHSecurity

    Resolve Trivy filesystem scan findings

    Resolved remaining Trivy filesystem scan findings and aligned SARIF severity.

    commit
  15. DASHFixed

    Repair build, CI, Docker, and healthcheck

    Repaired build, CI, Docker, and healthcheck for current toolchain.

    commit
  16. POLICY.mdReleasev0.2.0

    POLICY.md v0.2.0 - working specification

    Specification v0.2.0 with 12 condition operators (eq, neq, gt, gte, lt, lte, includes, in, notIn, exists, notExists, wildcard), allow/deny/require_approval actions. Authorization engine with 21 vitest tests (verified). CLI (validate, check, read, init, install, sync, list). OpenAI Codex adapter for command.run and network.* rules.

    SPECIFICATION.md CHANGELOG.md commit
  17. POLICY.mdAdded

    Initial POLICY.md framework

    First commit: parser, authorization engine, policy manager, tests.

    commit
  18. DASHReleasev0.1.0

    DASH v0.1.0 - working Rust implementation

    Claim + Evidence + Edge data model with provenance. OpenAI-compatible /v1/embeddings endpoint. WAL-backed store with redb persistence. Semantic-first retrieval. SDKs for Go, Python, TypeScript, Java/Kotlin, C#. Docker deployment. cargo-fuzz targets. 415 Rust tests passing (verified).

    CHANGELOG.md README.md commit
  19. DASHAdded

    Go, Python, and TypeScript SDKs with OpenAI drop-in compatibility

    Three SDKs with OpenAI drop-in compatibility.

    commit
  20. DASHInfrastructure

    GitHub Actions workflows (rust, sdks, fuzz-nightly, release, security)

    CI/CD workflows for Rust, SDKs, fuzzing, releases, and security scanning.

    commit
  21. DASHInfrastructure

    Production Kubernetes manifests and Helm chart

    Kubernetes manifests and Helm chart for production deployment.

    commit
  22. DASHInfrastructure

    cargo-fuzz targets and perf_bench CLI

    Fuzzing targets and performance benchmarking CLI.

    commit
  23. DASHAdded

    Comprehensive benchmarking and profiling infrastructure

    Benchmarking and profiling infrastructure with real perf_bench numbers.

    commit
  24. OVARAReleasev1.0.0

    OVARA Runtime v1.0.0

    Runtime gateway with policy evaluator handling 14 action types (shell, exec, git push/pull/fetch/checkout/force_push, github push/pr/merge/delete_branch, ci deploy/build_trigger/approval). Shell and git interceptors implemented. ed25519 machine identity, capability leases, delegation chains, trust scoring, HMAC-SHA256 receipts. Hardening artifacts (AppArmor, eBPF, Seccomp). Signature verification not enforced in V1 runtime check.

    commit CHANGELOG.md
  25. OVARAFixed

    High-severity error handling and security fixes

    Addressed high-severity error handling and security issues across the runtime.

    commit
  26. OVARAAdded

    Trust-server HTTP service and federated client

    Trust-server HTTP service, federated client in gateway evaluator, portable trust state SDK.

    commit
  27. OVARAInfrastructure

    OpenTelemetry tracing instrumentation

    End-to-end trace propagation in runtime gateway with OTLP-compatible span emission.

    commit
  28. OVARAAdded

    CrewAI, OpenAI Agents, and Browser Automation integrations

    Implemented CrewAI, OpenAI Agents, and Browser Automation integrations.

    commit
  29. OVARASecurity

    Harden runtime gateway security profiles

    Security profile hardening for the runtime gateway.

    commit
  30. OVARAAdded

    TypeScript and Python SDKs with portable verification

    TypeScript SDK (@ovara/sdk) with 16-method client (18 tests). Python SDK (ovara-sdk) with async httpx, ed25519 verification (70 tests).

    commit
  31. OVARAAdded

    Federated trust graph with cross-org identity federation

    Cross-organization trust graph with DFS path computation, portable ed25519-signed cross-org receipts.

    commit
  32. OVARAInfrastructure

    Terraform K8s manifests and multi-region topology

    Terraform K8s manifests (control plane 2-replica, gateway HPA 3-20, PostgreSQL, multi-region). Docker Compose full stack.

    commit
  33. OVARAAdded

    SSO/OIDC/SAML authentication and compliance export

    OIDC + SAML SSO providers, compliance report generator (SOC2, GDPR, audit summaries).

    commit
  34. OVARAInfrastructure

    Telemetry pipeline with OTLP, NATS, ClickHouse

    Telemetry pipeline with OTLP, NATS, console exporters and ClickHouse analytics schema.

    commit
  35. OVARAAdded

    Cloud enrollment client and policy sync service

    Cloud enrollment client (ed25519 key generation), policy sync service, cloud heartbeat.

    commit
  36. OVARAAdded

    Initial commit - cloud foundation (Phase 69)

    First commit: hosted control plane (Fastify + Drizzle ORM + PostgreSQL) with multi-tenant support, gateway enrollment, policy distribution.

    commit
  37. MAPChangedPR #12

    Server service extraction (PR #12)

    Extract server god function into modular service classes. Final PR in the refactor/extract-server-services series.

    PR #12
  38. MAPChangedPR #11

    Server service extraction (PR #11)

    Continued server modularization.

    PR #11
  39. MAPChangedPR #10

    Server service extraction (PR #10)

    Continued server modularization.

    PR #10
  40. MAPChangedPR #9

    Server service extraction (PR #9)

    Continued server modularization.

    PR #9
  41. MAPChangedPR #8

    Server service extraction (PR #8)

    Continued server modularization.

    PR #8
  42. MAPChanged

    Package renamed to @sidianlabs/map

    Globally renamed map-client to map, package to @sidianlabs/map.

    commit
  43. MAPInfrastructure

    CI: upload build artifacts to GitHub Actions

    TypeScript and Reference Server build artifacts uploaded in CI.

    commit
  44. MAPFixedPR #7

    Coordinated bugfix pass (PR #7)

    Default-deny, ephemeral keys, approval race condition, receipt unification, policy compilation.

    PR #7
  45. MAPReleasev0.1.0PR #6

    MAP v0.1.0 released

    Initial released package on npm. Policy evaluation before adapter execution, signed receipts (HS256/RS256), approval workflows, HTTP/payments/database-read adapters, TypeScript SDK, conformance test suites. Python and Go SDKs in preview. 12 PRs merged during implementation.

    npm CHANGELOG.md PR #6
  46. MAPSecurity

    SSRF hardening and crypto fixes

    SSRF hardening, crypto.randomBytes for jitter, fix orphan code.

    commit
  47. MAPAddedPR #1

    Complete MAP implementation with full SDK support (PR #1)

    First PR: complete MAP implementation with TypeScript, Python, and Go SDKs.

    PR #1
  48. MAPSecurity

    Comprehensive security hardening - 18 fixes

    Security hardening across all layers.

    commit
  49. MAPAdded

    Initial MAP TypeScript implementation

    First commit adding the MAP TypeScript source code.

    commit
  50. DASHAdded

    Core service and storage updates

    Database core service and storage updates.

    commit
  51. DASHAdded

    Evidence provenance citations in retrieval

    Retrieval persists and exposes full evidence provenance citations. Temporal claim metadata. Stance summary and contradiction risk fields. Claim confidence bands.

    commit
  52. DASHAdded

    Initial commit - ingestion transport HTTP route dispatch

    First commit: split ingestion transport HTTP route dispatch module.

    commit