Skip to content

Release v2.15.0: value origin on the MCP proxy, GDPR erasure that keeps the chain, encrypted retention archives, receipt time source - #1003

Merged
vaaraio merged 1 commit into
mainfrom
release/v2.15.0
Oct 18, 2026
Merged

vaaraio merged 1 commit into
mainfrom
release/v2.15.0

Conversation

@vaaraio

@vaaraio vaaraio commented Oct 18, 2026 •

Copy link
Copy Markdown
Owner

Release v2.15.0.

Value origin now works for any MCP client: vaara-mcp-proxy --value-origin remembers the recipient, payee and endpoint values in tool results and holds a later call that sends to one of them. --value-origin-strict holds every authority value not on the trusted list, for agents that pay. Value origin also reads phone numbers in international form and wallet addresses.

vaara trail erase removes one record's data for a GDPR Art. 17 request and appends a record that names it, so the chain still verifies. vaara trail rotate --encrypt-to encrypts the retention archive to a recipient key and writes a public seal, signed with the export key. Execution receipts can carry timeSource, and the verifier treats only a TSA-witnessed time as trusted.

Packaging: a UBI 9 Containerfile for vaara proxy that passes Red Hat preflight, and the SUSE BCI base pinned by its multi-arch index digest. vaara os-layer egress --public opens the public internet while keeping the operator's own network shut. vaara llm-proxy records a subscription seat's plan limits on each outcome.

Security: control characters in caller-supplied names cannot forge log lines, and an upstream connection error reaches the caller as its type only.

See CHANGELOG.md for the full list.

Summary by CodeRabbit

  • Release
    • Updated Vaara and its associated packages, apps, plugins, and deployment chart to version 2.15.0.
    • Updated the documented supported-platform version to 2.15.0.

…ps the chain, encrypted retention archives, receipt time source

vaara-mcp-proxy --value-origin brings recipient holds to any MCP client,
with a strict mode for agents that pay, and value origin now reads phone
numbers and wallet addresses. vaara trail erase removes one record's data
for an Art. 17 request and the chain still verifies. vaara trail rotate
--encrypt-to writes an encrypted archive with a public signed seal.
Receipts can state their time source; the verifier trusts only a witnessed
one. A UBI 9 Containerfile passes Red Hat preflight, the BCI base is
pinned by digest, os-layer egress --public opens the internet and keeps
the home network shut. Security: caller-supplied names cannot forge log
lines, and an upstream error reaches the caller as its type only.
@coderabbitai

coderabbitai Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 18414efd-5c1a-4282-8772-a28a5fb2fae1
📥 Commits

Reviewing files that changed from the base of the PR and between 0cdb8b6 and a861ce2.

📒 Files selected for processing: 11
  • CHANGELOG.md
  • clients/macos/Sources/VaaraMenuBar/Info.plist
  • clients/macos/Sources/WebKitGovernance/Info.plist
  • clients/ts/package.json
  • deploy/helm/vaara/Chart.yaml
  • docs/supported-platforms.md
  • plugins/claude-code-vaara-governance/.claude-plugin/plugin.json
  • pyproject.toml
  • server-vaara-server.json
  • server.json
  • src/vaara/__init__.py

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📝 Walkthrough

Release metadata changes from 2.14.0 to 2.15.0 across Vaara packages, applications, server manifests, and the Helm chart. The supported-platform documentation reflects the new version, and the changelog adds a 2.15.0 heading dated 2026-10-18.

Changes: Vaara 2.15.0 release metadata

Layer / File(s) Summary
Update release version records
pyproject.toml, src/vaara/__init__.py, server-vaara-server.json, server.json, clients/macos/Sources/VaaraMenuBar/Info.plist, clients/macos/Sources/WebKitGovernance/Info.plist, clients/ts/package.json, plugins/claude-code-vaara-governance/.claude-plugin/plugin.json, deploy/helm/vaara/Chart.yaml, docs/supported-platforms.md, CHANGELOG.md
Version values change from 2.14.0 to 2.15.0 across package, app, server, plugin, and chart records. The supported-platform documentation reflects 2.15.0, and the changelog adds a release heading dated 2026-10-18.

Priority: ➖ Normal

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to a861c

The release records are aligned on 2.15.0, with no actionable release-metadata issue identified. The PR is mergeable subject to normal checks.

Pre-merge checks: Passed 5
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title clearly identifies the v2.15.0 release and summarizes several primary changes described in the release objectives.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 1…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 1 files. (10 skipped: 10 unsupported.)

✨ Finishing Touches
📝 Generate docstrings
  • Commit to this branch
  • Create a new PR
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@vaaraio
vaaraio merged commit 34074ac into main Oct 18, 2026
33 checks passed
@vaaraio
vaaraio deleted the release/v2.15.0 branch October 18, 2026 19:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant