TrigGuard
TRIGGUARD CHANGELOG

Changelog

Protocol versions, API updates, and platform improvements.

v1.0.0 March 13, 2026 PROTOCOL

Initial public release of the TrigGuard Execution Authorization Protocol.

Protocol

  • Published TG-EXECUTION-AUTH-01 specification
  • Published TG-RECEIPT-SCHEMA specification
  • Published TG-KEY-DISCOVERY specification
  • Ed25519 signatures for all receipts
  • Three decision types: PERMIT, DENY, SILENCE

API

  • POST /execute — Request authorization for irreversible actions
  • GET /.well-known/trigguard-keys.json — Public key discovery
  • Idempotency key support for safe retries
  • Structured error responses with request IDs

Surfaces

  • deploy.* — Production deployments and releases
  • infra.* — Infrastructure changes (Terraform, Pulumi)
  • data.* — Data exports and migrations
  • secrets.* — Secrets access and rotation

Documentation

  • Complete API reference documentation
  • Integration examples for GitHub Actions, Terraform, REST API
  • Offline verification guide
  • Security policy and responsible disclosure
v0.9.0 February 28, 2026 API

Release candidate. Final API stabilization before TG-01 PROTOCOL.

Changes

  • Stabilized receipt schema — no breaking changes expected
  • Added expires_at field to PERMIT responses
  • Added policy_id field to DENY responses
  • Improved error messages for invalid surface identifiers

Deprecations

  • Deprecated result field — use decision instead
  • Legacy key format will be removed in v1.1
v0.8.0 February 14, 2026 SECURITY

Key rotation infrastructure and enhanced verification.

Security

  • Implemented quarterly key rotation schedule
  • Added key status field (active, revoked)
  • 90-day overlap period during key transitions
  • Published security.txt at well-known endpoint

API

  • Added cache_ttl to keys.json response
  • Key discovery endpoint now returns CORS headers
v0.7.0 January 30, 2026 PLATFORM

Dashboard beta and receipt verification tools.

Platform

  • Dashboard beta release at app.trigguard.com
  • Organization and team management
  • API key management with scopes
  • Receipt verification tool in browser

Earlier versions available in the protocol repository.