Thoth Docs Changelog

Pulumi provider 0.1.16 — Added, Changed, Upgrade note

Fri, 18 Sep 2026 00:00:00 GMT

Bridged the Terraform provider's 0.1.16 surface. `GovernanceSettings` gains the | Updated Terraform provider bridge dependency pin to | Bumped Pulumi release defaults/docs to `0.1.16`: | `Makefile` default `VERSION` | plugin install command in `docs/installation-configuration.md`

Python SDK 0.5.23 — Fixed, Security, Added, Unchanged

Fri, 18 Sep 2026 00:00:00 GMT

The tracer discarded the final enforcement decision after computing effective | A resolved `STEP_UP` no longer loses the initial policy evidence or the | A sparse server response no longer erases locally established correlation. | A server response whose action or trace ID contradicts the locally established | `EnforcementDecision` and the policy exceptions gain an optional | Claude Agent SDK post-success and post-failure hooks now carry decision | Tool execution, blocking, deferral, step-up and argument-modification

Terraform provider 0.1.16 — Added, Changed, Security, Upgrade note

Fri, 18 Sep 2026 00:00:00 GMT

`thoth_governance_settings` gains an executable compliance declaration: | Per-regime coverage counts are known at plan time from a catalogue pinned into | `thoth_mcp_vendor` gains manifest signature attributes | `thoth_governance_settings` gains `regulatory_regimes` for onboarding baseline | The governance executive summary and reports overview data sources return | Updated indirect dependencies, including `golang.org/x/text` 0.37.0 to 0.41.0,

Thoth CLI and MCP proxy 0.3.7 — Security, Added, Fixed, Known limitations, Changed

Sat, 12 Sep 2026 00:00:00 GMT

Updated the HTTP/2 stack from `h2` 0.4.13 in v0.3.6 to 0.4.19, fixing | Carried an action attestation ID through every governed tool call. The proxy | Reported decision evidence on `ALLOW` and `BLOCK` responses, which previously | Stopped writing enforcer error response bodies and selected response headers | Distinguished an enforcer response with no recognized decision from a genuine | Preserved request-side correlation IDs on the terminal event when the enforcer | Kept a locally escalated `STEP_UP` from exporting a receipt that the | Distinguished an absent model risk score from one the enforcer explicitly

Go SDK 0.1.19 — Added, Changed

Fri, 11 Sep 2026 00:00:00 GMT

Added a per-action attestation ID, generated for each tool call unless the | Added model name/provider/artifact context, authentication and delegation | Added public process-local delivery status and bounded shutdown APIs. | Minimized retained HTTP and SQS telemetry with an explicit allowlist. Tool | Added bounded HTTP and SQS delivery retries with stable event and FIFO | Added SQS partial-batch failure handling, process-local delivery counters, | Expanded the public decision-envelope compatibility contract and standalone | Documented the telemetry privacy boundary and the limits of process-local

Python SDK 0.5.22 — Added, Fixed, Changed

Fri, 11 Sep 2026 00:00:00 GMT

Added first-class LangGraph support through `instrument_langgraph()`, | Added per-action attestation IDs across authorization, Claude Agent SDK hooks, | Added model name/provider/artifact context, authentication and delegation | Added human-explanation retrieval for blocked and step-up decisions with | Added wheel-content validation and clean installed-package tests for the base | Return a fresh approval-timeout decision for every sync and async call, so | Reject unresolved or malformed step-up results without executing the tool, | Reject Claude callback results that identify a different action, and avoid

TypeScript SDK 0.1.21 — Fixed

Fri, 11 Sep 2026 00:00:00 GMT

Continue polling canonical unresolved STEP_UP hold responses until resolution

TypeScript SDK 0.1.20 — Added, Changed

Fri, 11 Sep 2026 00:00:00 GMT

Added a per-action attestation ID, generated for each tool call unless the | Added bounded human-explanation requests for blocked and step-up decisions and | Exported behavioral-event emission and per-event delivery status types for | Minimize default telemetry with an explicit field allowlist; omit tool arguments and free-text context, reasons, explanations and full receipts. Authorization inputs and enforcement behavior are unchanged. See PRIVACY.md for wire data and migration limits. | Remove payload-bearing diagnostic logs and verify the installed npm artifact against a local HTTP collector. | Make telemetry delivery resilient: bounded retries with stable event IDs, so a | Use native Node ESM imports throughout the published package. | Restrict the published package to built output, source and user-facing docs via

Pulumi provider 0.1.15 — Changed, Fixed

Thu, 23 Jul 2026 00:00:00 GMT

Updated Terraform provider bridge dependency pin to | Bumped Pulumi release defaults/docs to `0.1.15`: | `Makefile` default `VERSION` | plugin install command in `docs/installation-configuration.md` | Updated docs for Pulumi Registry lint compatibility: | extensionless internal cross-link in `docs/_index.md` | markdown SDK links (no bare URLs) in

Terraform provider 0.1.15 — Fixed

Thu, 23 Jul 2026 00:00:00 GMT

Updated provider docs for Pulumi Registry compatibility by converting

Pulumi provider 0.1.14 — Fixed

Fri, 10 Jul 2026 00:00:00 GMT

Added required YAML front-matter blocks to: | `docs/_index.md` | `docs/installation-configuration.md` | This unblocks Pulumi registry metadata generation (`resourcedocsgen metadata from-github`)

Terraform provider 0.1.14 — Changed

Fri, 10 Jul 2026 00:00:00 GMT

Release alignment patch to unblock downstream Pulumi provider `v0.1.14`

Pulumi provider 0.1.13 — Changed, Added

Thu, 09 Jul 2026 00:00:00 GMT

Updated Terraform provider bridge dependency pin to | Bumped Pulumi release defaults/examples to `0.1.13`: | `Makefile` default `VERSION` | README release line and manual plugin-install command docs | Node.js and .NET example package references | Updated Pulumi bridge language metadata so Node.js SDK publishing is declared | Corrected .NET namespace configuration to avoid doubled NuGet identity | Added explicit plugin download URL + bridge metadata wiring in provider

Terraform provider 0.1.13 — Added, Changed

Thu, 09 Jul 2026 00:00:00 GMT

Thoth CLI and MCP proxy 0.3.6 — Fixed

Thu, 09 Jul 2026 00:00:00 GMT

Emitted behavioral telemetry events from the Rust `thoth` proxy for local

Go SDK 0.1.18 — Changed

Sat, 20 Jun 2026 00:00:00 GMT

Added configurable resilience mode via `Config.FailOpen` / `THOTH_FAIL_OPEN`. | Auth failures (`401`/`403`) remain fail-closed and continue returning `BLOCK`. | Added regression coverage in internal and public SDK tests for fail-open/fail-closed behavior. | Added vendor-runtime observability coexistence tests for Datadog, LangSmith, OpenTelemetry, | Added compatibility matrix CI coverage for Go runtime-stack coexistence verification.

Python SDK 0.5.21 — Changed

Sat, 20 Jun 2026 00:00:00 GMT

Added configurable resilience mode via `ThothConfig.fail_open` / `THOTH_FAIL_OPEN`. | Auth failures (`401`/`403`) remain fail-closed and continue returning `BLOCK`. | Added regression tests for fail-open timeout, retryable status, and auth-failure handling. | Added LangSmith coexistence integration coverage | Added observability-wrapper coexistence integration coverage for Datadog-like, | Hardened `instrument()` wrapping for LangChain-style duck-typed tools so | Fixed generic `.tools` wrapping for callable-only tool entries (plain | Added regression tests for callable-only tool entries and LangChain

TypeScript SDK 0.1.19 — Changed

Sat, 20 Jun 2026 00:00:00 GMT

Added configurable resilience mode via `failOpen` / `THOTH_FAIL_OPEN`. | Auth failures (`401`/`403`) remain fail-closed and continue returning `BLOCK`. | Added regression tests for fail-open timeout/status behavior and auth-failure handling. | Added vendor-runtime compatibility regression tests for Datadog, LangSmith, | Added compatibility matrix CI coverage with per-stack TypeScript runtime test runs.

Python SDK 0.5.20 — Added

Mon, 15 Jun 2026 00:00:00 GMT

Added a LangGraph runtime enforcement example at | Added a companion policy example at | Added a cookbook notebook at | Added a reusable composite GitHub Action at | Added a static analysis helper script at | Added a vendor-neutral RFC issue draft for LangGraph tool interception hooks | Added an engineering blog draft at

Pulumi provider 0.1.12 — Changed, Added, Fixed

Wed, 10 Jun 2026 00:00:00 GMT

Updated Terraform provider bridge dependency pin to | Bumped Pulumi release defaults/examples to `0.1.12`: | `Makefile` default `VERSION` | Node.js example package dependency (`@atensec/pulumi-thoth`) | Pulumi bridge now exposes Terraform `0.1.12` MCP vendor registry and catalog | `McpVendor` resource | `getMcpVendors` data source | `McpCatalogVerify` resource

Thoth CLI and MCP proxy 0.3.5 — Added, Changed

Wed, 10 Jun 2026 00:00:00 GMT

Added MCP vendor registry and catalog verification command surfaces in `thothctl` | Updated release automation and public distribution flow for `thoth` and `thothctl`

Terraform provider 0.1.12 — Added, Fixed

Tue, 09 Jun 2026 00:00:00 GMT

Added MCP vendor registry support: | `thoth_mcp_vendor` resource | `thoth_mcp_vendors` data source | Added MCP inventory and verification surfaces: | `thoth_mcp_inventory_report` data source | `thoth_mcp_catalog_verify` resource | Stabilized `thoth_mcp_vendor.host_patterns` state behavior to avoid apply/read | [v0.1.18 / v0.3.4 (June 8, 2026)](#release-v0-1-18-v0-3-4-2026-06-08)

v0.1.18 / v0.3.4 — Enterprise release pathway: Homebrew tap + notarized PKG + supply-chain trust metadata

Mon, 08 Jun 2026 00:00:00 GMT

Go SDK: unchanged at `sdk/go/v0.1.17` | Python SDK: unchanged at `sdk/python/v0.1.16` | TypeScript SDK: unchanged at `sdk/npm/v0.1.18` | Thoth proxy + `thothctl` binary line: `thoth/v0.3.4` | Terraform provider: unchanged at `v0.1.11` | Pulumi provider: unchanged at `v0.1.11` | Added Homebrew tap publication flow for `atensecurity/homebrew-tap`. | Added notarized macOS PKG release pathway for MDM deployments (Jamf/Intune/Kandji).

v0.1.18 / v0.3.3 — MODIFY, DEFER, and complete MOSES decision envelope across Python, Go, and TypeScript

Thu, 14 May 2026 00:00:00 GMT

Go SDK: `sdk/go/v0.1.17` | Python SDK: unchanged at `sdk/python/v0.1.16` | TypeScript SDK: `sdk/npm/v0.1.18` | Thoth proxy + `thothctl` binary line: unchanged at `thoth/v0.3.3` | Terraform provider: unchanged at `v0.1.11` | Pulumi provider: unchanged at `v0.1.11` | **`MODIFY`** — the enforcer rewrites tool arguments before execution. The governed wrapper calls the tool with the modified args. `PolicyViolationError` / `ThothPolicyViolation` is not raised — execution proceeds with policy-applied arguments. The audit trail carries both the original request and the modification reason. | **`DEFER`** — the enforcer signals the caller to retry after a specified timeout. Different from `STEP_UP`: no human approval required, time-bounded, and recoverable by design. The error surfaces `deferTimeoutSeconds` / `DeferTimeoutSeconds` for caller-side retry logic.

v0.1.17 / v0.3.3 — Proxy 0.3.3 and provider 0.1.7 release alignment

Sun, 10 May 2026 00:00:00 GMT

Go SDK: unchanged at `sdk/go/v0.1.15` | Python SDK: `sdk/python/v0.1.16` | TypeScript SDK: `sdk/npm/v0.1.17` | Thoth proxy + `thothctl` binary line: `thoth/v0.3.3` | Terraform provider: `v0.1.7` | Pulumi provider: `v0.1.7` | Promoted Thoth CLI/proxy docs to the `thoth/v0.3.3` binary line. | Standardized provider references on `v0.1.7` across Terraform and Pulumi docs.

v0.1.16 / v0.3.0 — Org API key auth for IaC + Thoth 0.3.0 release line

Tue, 05 May 2026 00:00:00 GMT

Go SDK: unchanged at `sdk/go/v0.1.15` | Python SDK: unchanged at `sdk/python/v0.1.15` | TypeScript SDK: unchanged at `sdk/npm/v0.1.16` | Thoth proxy + `thothctl` binary line: `thoth/v0.3.0` | Terraform provider: `v0.1.3` | Pulumi provider: `v0.1.2` | Added org-level API key auth for provider workflows and preserved bearer-token compatibility. | Standardized CI/CD auth through `THOTH_API_KEY` for Terraform and Pulumi provider usage.

v0.1.15 / v0.2.23 — Canonical release lines, Secrets Broker GA docs, and ingest resilience

Thu, 30 Apr 2026 00:00:00 GMT

Go SDK: `sdk/go/v0.1.14` | Python SDK: `sdk/python/v0.1.14` | TypeScript SDK: `sdk/npm/v0.1.15` | Thoth endpoint runtime: `thoth/v0.2.23` | Standardized customer docs on canonical release channels (`thoth/v*` for endpoint runtime, `sdk/*` for SDKs). | Updated install and quick-reference pages to reflect current stable versions and package constraints. | Added customer-ready strict-mode Secrets Broker examples for MCP tools (for example Figma, Notion, and Stitch host bindings). | Documented fail-closed token handling patterns for endpoint runtime use without storing long-lived tokens in local tool config.

v0.1.14 / v0.2.22 — SDK log-level controls + governance envelope hardening

Tue, 28 Apr 2026 00:00:00 GMT

Go SDK: `sdk/go/v0.1.13` | Python SDK: `sdk/python/v0.1.13` | TypeScript SDK: `sdk/npm/v0.1.14` | Thoth endpoint runtime: `thoth/v0.2.22` | Added SDK log-level controls across Go, Python, and TypeScript for cleaner operator debugging. | Improved STEP_UP token and enforcement trace diagnostics to make approval-path troubleshooting faster. | Unified auth/delegation envelope fields across control-plane and runtime services. | Added stricter default purpose-class enforcement and promotion lifecycle guardrails.

v0.5.5 / v0.2.20 — Tenant-scoped telemetry and API-key hardening

Mon, 27 Apr 2026 00:00:00 GMT

Go SDK: `sdk/go/v0.1.11` | Python SDK: `sdk/python/v0.5.4` | TypeScript SDK: `sdk/npm/v0.5.5` | Thoth endpoint runtime: `thoth/v0.2.20` | Go, Python, and TypeScript SDK ingestion paths now align to tenant-scoped telemetry/event IDs to avoid cross-tenant event collisions. | Instrumentation payload models were updated to preserve scoped event identity throughout ingest and normalization. | Improved API key management UX and guidance for scope-aware authorization. | Set a secure 90-day default API key expiry with proactive warnings for near-expiry keys.

v0.5.4 / v0.2.19 — In-place runtime update experience

Sun, 26 Apr 2026 00:00:00 GMT

Go SDK: unchanged at `sdk/go/v0.1.10` | Python SDK: unchanged at `sdk/python/v0.5.3` | TypeScript SDK: unchanged at `sdk/npm/v0.5.4` | Thoth endpoint runtime: `thoth/v0.2.19` | Added in-place update workflows for endpoint runtime and admin tooling. | Each command checks GitHub Releases, verifies asset checksums (`checksums.sha256`), and installs only verified binaries. | `--force` is supported for explicit reinstallation of the latest release. | Updated external docs to reflect current Thoth binary line `v0.2.19`.

v0.5.4 / v0.2.18 — Scoped key reliability + SDK ingest auth parity

Sun, 26 Apr 2026 00:00:00 GMT

Go SDK: `sdk/go/v0.1.10` | Python SDK: unchanged at `sdk/python/v0.5.3` | TypeScript SDK: `sdk/npm/v0.5.4` | Thoth endpoint runtime: `thoth/v0.2.18` | Go and TypeScript SDK emitters now send both `Authorization: Bearer ...` and `X-Api-Key` headers on ingest calls to match enforcer/runtime expectations. | Non-2xx ingest failures now log the HTTP status, target URL, and a safe response-body snippet to speed up debugging. | API key creation and authorization flows now support explicit scope selectors: | `--organization`

v0.1.6 / v0.2.8 — Python SDK `ThothClient` Backward-Compatibility Export

Fri, 24 Apr 2026 00:00:00 GMT

Go SDK: unchanged at `sdk/go/v0.1.5` | Python SDK: unchanged at `sdk/python/v0.1.6` | TypeScript SDK: unchanged at `sdk/npm/v0.1.6` | Thoth binary line: unchanged at `thoth/v0.2.8` | Restored `from thoth import ThothClient` compatibility export. | Added legacy method aliases (`wrap`, `wrap_openai_tools`, `wrap_anthropic_tools`) that delegate to current `instrument*` APIs. | Python SDK README now includes a legacy compatibility section for `ThothClient`. | Docs-site Python SDK reference now calls out preferred module-level APIs and legacy `ThothClient` support.

v0.1.6 / v0.2.8 — Headless operations improvements

Wed, 22 Apr 2026 00:00:00 GMT

Go SDK: unchanged at `sdk/go/v0.1.5` | Python SDK: unchanged at `sdk/python/v0.1.6` | TypeScript SDK: unchanged at `sdk/npm/v0.1.6` | Thoth endpoint runtime: `thoth/v0.2.8` | Added tenant-scoped MDM provider configuration and sync workflows for Jamf and Intune. | Fleet management now supports on-demand provider inventory synchronization to upsert endpoint records. | Provider sync now supports default fleet and environment mapping for imported endpoints. | Admin tooling is now documented as the default path for no-dashboard bootstrap and updates.

v0.1.6 / v0.2.7 — Proxy Identity Defaults + Enforcer Context-Diff Warnings

Tue, 21 Apr 2026 00:00:00 GMT

Go SDK: unchanged at `sdk/go/v0.1.5` | Python SDK: unchanged at `sdk/python/v0.1.6` | TypeScript SDK: unchanged at `sdk/npm/v0.1.6` | MCP Proxy: `thoth/v0.2.7` | Endpoint identity resolution now defaults to immutable machine identity (Intune/Jamf managed ID override, then OS machine ID), with hostname only as last-resort fallback. | `THOTH_USER_ID` remains required and must be a valid email address. | `enforcer_url` and `govapi_url` are inferred from `tenant_id` + `apex_domain`. | `--enforcer-url` / `THOTH_ENFORCER_URL` are now deprecated and ignored.

v0.1.6 / v0.2.3 — Wrap-Config Env Injection + Simpler Endpoint Routing

Mon, 20 Apr 2026 00:00:00 GMT

Go SDK: unchanged at `sdk/go/v0.1.5` | Python SDK: unchanged at `sdk/python/v0.1.6` | TypeScript SDK: unchanged at `sdk/npm/v0.1.6` | MCP Proxy: `thoth/v0.2.3` | `thoth wrap-config` now supports repeatable `--env KEY=VALUE` to inject runtime environment values directly into selected MCP server entries. | Wrap output remains idempotent and now reports environment changes when values are updated. | Fleet registration URL handling is simplified: | `govapi_url` is derived automatically from `tenant_id` + `apex_domain` as `https://grid..`.

v0.1.6 / v0.2.2 — Fail-Closed Enforcement + Canonical Contract Parity

Sun, 19 Apr 2026 00:00:00 GMT

v0.1.3 / v0.2.0 — Telemetry Metadata + Policy Context Propagation

Wed, 15 Apr 2026 00:00:00 GMT

v0.1.2 — Tenant API URL Contract + Session Intent Enforcement

Fri, 10 Apr 2026 00:00:00 GMT

Go: `sdk/go/v0.1.2` | Python: `sdk/python/v0.1.2` | TypeScript: `sdk/npm/v0.1.2` | Go, Python, and TypeScript SDKs now use a single tenant API URL for both: | policy enforcement (`POST /v1/enforce`) | behavioral event ingestion (`POST /v1/events/batch`) | SDK startup now requires tenant API URL configuration via: | explicit config (`APIURL` / `api_url` / `apiUrl`)

v0.1.1 — API Contract Fixes

Tue, 31 Mar 2026 00:00:00 GMT

Critical enforcement compatibility and decision-handling fixes across request/response mapping. | Endpoint and schema alignment updates for stable enforcement and step-up behavior. | Improved client metadata propagation and response observability fields. | `emitBehavioralEvent` was not exported from the package root. It is now accessible via | All endpoint paths, request field names (corrected to snake_case), response schemas, and

v0.1.0 — First General Availability Release

Mon, 30 Mar 2026 00:00:00 GMT

`instrument(agent, ...)` — Instrument any AI agent with a `.tools` attribute. Auto-detects | `instrument_anthropic(tool_fns, ...)` — Wrap tool execution functions for Anthropic Claude | `instrument_openai(tool_fns, ...)` — Wrap tool execution functions for OpenAI tool-calling loops. | `ThothPolicyViolation` exception — raised when the enforcer blocks a tool call. Fields: | `get_current_session()` — Access the active session context from within a governed tool call. | `ThothConfig` — Pydantic model with full field validation. | `EnforcementMode` enum — `observe` | `progressive` | `step_up` | `block`. | LangGraph and CrewAI integrations — auto-detected via duck-typing.