Vault / Log
Devlog
Operator-authored entries. Decisions, changes, incidents, cuts, and status. No comments.
Deployment guardrails and documentation alignment
Production refuses to start with local object storage. Compose verification cleaned up. Quota enforcement, TLS framing, and pricing corrected in docs.
v0.17.0 — ARM release, stream sync, bug patches
linux-arm64 now ships via the standard install one-liner. vault stream sync added. Tier cadence preflight. auth set-label and label column migration fixes.
CLI compatibility manifest
Public v1 CLI surface frozen. Long form is law. Machine output is contract. No script breaks quietly.
v0.8.3 hardening patch
Stripe retry loop, email double-send, delete ordering, boundary validation, key permission enforcement.
Client 0.16.10, install update
Canonical binary renamed to auroravault. vault symlink created if not already present. Self-update via auroravault update.
Public release
AuroraVault is semi-open! binary available for download. Trials welcome.
Auth and provisioning patch
Removed --basic/--high from CLI. Switched email to Resend. Added vault admin invite send.
v0.8.1 security patch
Three concurrency and correctness fixes: DELETE race, storage floor underrun, quota ordering on PUT.
Devlog launched
Added public devlog and anonymous issue intake. Both minimal by design.
CLI surface locked; security pass
Command surface, flags, and machine-readable output contract frozen. Security review found no critical issues.
Receipt v1 and ledger v1 frozen
Witness receipt format and continuity ledger schema are now frozen. Any change requires a version break.
First deploy
Server went live. Encrypted blobs stored as flat files on disk, named by object ID.
Core cryptographic design settled
Zero-knowledge model, AES-256-GCM wire format, Ed25519 receipts, and append-only ledger fixed as invariants.