v1.0.0 — Production Release

http-capability-gateway v1.0.0

Production-ready capability-based HTTP gateway with formal verification integration.

Features

• Policy Pipeline: DSL-driven request/response policy evaluation
• Gateway Core: HTTP proxying with capability-based access control
• Health Checks: Backend health monitoring with circuit breaker
• Metrics: Telemetry collection and exposure
• mTLS: Mutual TLS for backend connections
• SafeTrust Integration: Formally verified trust level hierarchy (via proven)
• A2ML Attestations: Tamper-evident audit trail for policy decisions
• Circuit Breaker: Three-state FSM (closed/open/half-open)
• K9-SVC Contracts: Service-level agreement enforcement
• Rate Limiter: Token bucket rate limiting per client
• OWASP Headers: Security headers on all responses
• Minikaran Anomaly Detection: Statistical anomaly flagging

Documentation

• docs/DEPLOYMENT.md — Comprehensive deployment guide
• docs/POLICY-DSL.md — Policy DSL reference
• docs/K9-SVC-EXPLAINED.adoc — Service contracts explained
• docs/A2ML-EXPLAINED.adoc — Attestation format explained

License

PMPL-1.0-or-later (Palimpsest License)