Skip to content

Latest commit

 

History

History
23 lines (19 loc) · 1.01 KB

File metadata and controls

23 lines (19 loc) · 1.01 KB

Changelog

All notable changes to the UnboxAPI Safety Proxy skeleton are recorded here. The format follows Keep a Changelog and this project adheres to Semantic Versioning.

[0.1.0] - 2026-05-27

Added

  • Initial public release of the safety-proxy / context-injection interface skeleton.
  • CallContext, HookResult, HookAction dataclasses / enum.
  • SafetyHook and SafetyProxy Protocol definitions.
  • LoggingHook trivial reference hook (logs context; unconditional ALLOW).
  • README with prominent NOT PRODUCTION SAFETY banner.
  • SECURITY.md with coordinated-disclosure policy.
  • Threat-model memo (docs/threat-model.md).
  • CODEOWNERS, CI workflow (gitleaks + semgrep + osv-scanner + mypy).
  • Sigstore-signed release tag and CycloneDX SBOM.

Out of scope at v0.1.0

  • No production safety rules, classifiers, or prompt-injection detection.
  • No spend-cap or quantity-cap enforcement.
  • No external contributions accepted at this tag.