feat: enterprise hardening — foundation, security, observability, deploy#5

Open

kienbui1995 wants to merge 37 commits intomainfrom

feat/enterprise-hardening

Commits on Apr 18, 2026

feat(core): P0 hardening — protocol versioning, task cancel, pause/resume, validation

kienbm
and
claude
committed
build(api): add OpenAPI 3.0 spec covering all 53 operations

kienbm
and
claude
committed
build(deploy): add Helm chart, K8s manifests, and observability stack

kienbm
and
claude
committed
docs(governance): add governance, compliance, and operational runbooks

kienbm
and
claude
committed
ci(security): add Dependabot, OpenSSF Scorecard, govulncheck, gosec

kienbm
and
claude
committed
docs(examples): add CrewAI, LangChain, AutoGen integration examples

kienbm
and
claude
committed
feat(store): add PostgreSQL Row-Level Security for multi-tenant isolation

kienbm
and
claude
committed
feat(secrets): add pluggable SecretProvider abstraction (env + stubs)

kienbm
and
claude
committed
feat(gateway): add Redis-backed distributed rate limiter

kienbm
and
claude
committed
docs(benchmarks): add benchmark suite + baseline publication

kienbm
and
claude
committed
feat(auth): add OAuth2/OIDC/JWT authentication alongside API key

kienbm
and
claude
committed
feat(tracing): replace custom tracing with OpenTelemetry SDK

kienbm
and
claude
committed
test(e2e): add end-to-end test suite covering full flow

kienbm
and
claude
committed
refactor(store): propagate context.Context through Store interface

kienbm
and
claude
committed
feat(monitor): wire 4 previously-silent metrics + add budget counter

kienbm
and
claude
committed
feat(tracing): instrument router, orchestrator, webhook, costctrl spans

kienbm
and
claude
committed
refactor(config): migrate credential env vars to SecretProvider

kienbm
and
claude
committed
feat(store,gateway): wire PostgreSQL RLS into runtime request flow

kienbm
and
claude
committed
ci(security): Sigstore signing, SLSA provenance, Trivy scan, SHA pinning

kienbm
and
claude
committed
test(e2e): add Postgres-backed E2E tests via testcontainers

kienbm
and
claude
committed
docs(examples): add LlamaIndex, Haystack, DSPy integration examples

kienbm
and
claude
committed
feat(cli): shell completion, config file, Codecov integration

kienbm
and
claude
committed
docs(tutorials,migration,case-studies): zero-to-production tutorial + v0→v1 migration + case study template

kienbm
and
claude
committed
security(ci): pin gosec action to SHA (v2.25.0)

kienbm
and
claude
committed

Commits on Apr 19, 2026