| Multi-tenancy |
Done |
Released baseline |
PostgreSQL RLS migrations, tenant middleware, tenant-scoped stores, integration tests under tests/integration/, 2026-06-09 release evidence |
Keep live PostgreSQL RLS tests in CI; tenant SQL static gates must keep passing |
| Auth, API keys, RBAC |
Done |
Released baseline plus OIDC plan |
internal/auth/, internal/middleware/rbac.go, API key scopes, RBAC_MATRIX.md, OIDC integration test plan, local OIDC harness evidence |
Attach Keycloak/Auth0 live IdP E2E evidence before enterprise sign-off |
| Agent runtime |
Done |
Released baseline plus Unreleased Eino path |
internal/agent/, chat APIs, tool loop, skills, memory, MCP, changelog Unreleased Eino 0.9 entry |
Treat Eino 0.9 behavior as v2.4.0-dev until release |
| Execution receipts and audit |
Done |
Released baseline |
Execution receipt store/API, audit middleware/store, trace correlation documented in API/reference docs |
Add longer retention/export policy if regulated deployments require it |
| Workflow and human tasks |
Done |
Released baseline plus Unreleased Eino default executor |
internal/workflow/, workflow stores, OpenAPI workflow paths, workflow-guide.en.md |
Keep workflow Eino executor release notes separated from stable workflow API |
| Sandbox isolation |
Done |
Released baseline plus Unreleased K8s Job mode |
Local/Docker sandbox policy and tenant controls; K8s Job mode listed in Unreleased |
Validate cluster RBAC, image policy, and resource limits before production use |
| Egress control |
Done |
Current branch v2.4.0-dev |
SecureTransport, tenant allowlist rules, production deny-all default, HERMES_EGRESS_DEFAULT override, persisted egress.denied audit events surfaced by /admin/v1/egress/blocked-log |
Add live allowlist smoke test in production-like deployment |
| Metering and usage |
Partial |
Released tenant usage plus Unreleased admin aggregation |
usage_records, tenant usage API, admin aggregation listed in Unreleased |
Clarify billing-system integration remains out of scope |
| Observability |
Done |
Released baseline plus Unreleased pre-built pack |
Prometheus metrics, OTel tracing, structured logging, Grafana dashboard, alerts, Prometheus config, Helm/Compose render evidence |
Import dashboard and dry-run alerts in staging |
| Backup and disaster recovery |
Partial |
Released PG backup baseline plus Unreleased Redis/MinIO scripts |
PG backup/restore docs, scripts/dr-test.sh, scripts/pitr-drill.sh, PITR runbook, 2026-06-09 local evidence |
Local DR did not pass because backup directories/PITR container were absent; record RTO/RPO in a prepared environment before sign-off |
| OpenAPI contract |
Done |
Current docs/API baseline v2.4.0-dev |
internal/api/openapi.go, GET /v1/openapi, OpenAPI tests |
Keep info.version aligned with README release-state note |
| CI and security gates |
Done |
Released baseline plus current-branch supply-chain artifacts |
Go tests, integration tests, race/coverage workflows, govulncheck, gosec, Trivy, CodeQL, Dependabot, CycloneDX SBOM workflow, release provenance attestation |
Add DAST/container runtime checks and image signing if production policy requires them |