[jorisjonkers-dev-agents]

🤖 I have created a release beep boop

1.0.0 (2026-10-27)

⚠ BREAKING CHANGES

• model: drop the rollback-backup annotation and the snapshot's backups list (#652)
• model: encrypt every off-cluster copy to a recipient the platform names (#636)
• model: observability.alertClass, reviewBy on a dormant participant and per-cluster env overlays are refused; a self grant needs the Process's own Vault client; the schema version is the package version.

Features

• cli: generate an Application's App Roles in its language (#632) (f1dd8ae)
• model: admit the Release Gate's own requests to every gate member (#606) (928c1f2)
• model: cut the model to what 1.0 keeps (#628) (660f519), closes #379
• model: declare the rest of the foundation and its bootstrap set (#627) (73ec006)
• model: derive a bucket catalog from the edges into an object store (#647) (3556e65)
• model: derive a Move from a Process and its active Instance (#648) (e81d842)
• model: derive and render the Stable Address, and point every alias at it (#646) (dc4d040)
• model: drop the rollback-backup annotation and the snapshot's backups list (#652) (e255f84)
• model: encrypt every off-cluster copy to a recipient the platform names (#636) (b11de5d)
• model: let a Process create pods only from a spawn template it declares (#641) (5e3684a)
• model: let a sidecar mount the Process's volumes it names, and run before it as an init step (#651) (79cf13f)
• model: move an Application between Projects by declaring it in the new one first (#650) (30bc541)
• model: name the member that serves a native Client's protected path (#630) (3afe557)
• model: pin the facts a Move is derived from (#644) (1e01c28)
• model: reach the Kubernetes API without holding a rule (#643) (3fd3e16)
• model: refuse a fragment written at a model version the toolkit does not read (#670) (8568aaf), closes #665
• model: render an open Move: its Instances, step Jobs and move identity (#649) (f00fc54)
• model: resolve a DNS-serving Process through the platform's upstream nameservers (#639) (c46b561)
• model: scope an api rule to its Process's namespace or the cluster (#640) (7bc3655)
• model: scrape a rolling Process through a ServiceMonitor (#638) (0c7ebf8)
• model: take a route's TLS from its tier (#625) (a0cddd3), closes #582

---

This PR was generated with Release Please. See documentation.

[github-actions]

Shape

bucket	files	additions	deletions
documentation	1	+33	-0
tooling	3	+4	-4

Coverage

Baseline: main @ 30bc541.

metric	this branch	main	diff
statements	99.74%	99.74%	0.00
branches	98.57%	98.56%	+0.01
functions	100.00%	100.00%	0.00
lines	99.72%	99.72%	0.00

This pull request changed no covered line.

[jorisjonkers-dev-agents]

🤖 Created releases:

• v1.0.0

🌻