docs: update CHANGELOG and README (#54)
* docs: update v0.3.0 scope — sync + operability, defer embeddings
* docs: update CHANGELOG and README for unreleased changes
- Add StorageEngine generic erasure (#44) to Unreleased
- Add ROADMAP v0.3.0 redefinition (#51, #53) to Unreleased
- Add documentation alignment changes to Unreleased
- Replace 'v1 Scope' with versioned scope (v0.1.0, v0.2.0, v0.3.0)
- Add Language Bindings section (Python, Node.js)
- Add Rango Integration Skill section

docs: update v0.3.0 scope in ROADMAP.md (#53)
* docs: update v0.3.0 scope — sync + operability, defer embeddings
* docs: clarify adapter contracts are core-only, implementations external
* docs: align outdated phase/version references with current roadmap
- Replace Phase 8/9 with current phase names (Phase 2, Phase 3, etc.)
- Replace v1/v1.5-v2/v2+ with v0.1.0/v0.2.0/post-v0.3.0
- Update ADR context sections without changing decisions
- Update .gitignore to exclude superpowers artifacts
- Remove references to specific vector store adapters from architecture docs

v0.2.0-rango-20260505-1445-5fb129d
feat: add rango-integration skill for agentic development workflows (...

v0.2.0-rango-20260505-0429-699f4d1
refactor: erase StorageEngine generic from RangoClient and RangoEngin...

Release v0.2.0 — Consolidation

Release/v1.6.0 consolidation (#49)
* test(server): add concurrent isolation and audit trail tests (#10, #12)
Add integration tests for tenant isolation and audit trail completeness:
- concurrent_isolation.rs: concurrent push/pull cross-tenant isolation
- audit_completeness.rs: boundary violation audit records
- audit_trail_completeness.rs: persistent audit for all rejection paths
- read_filter_enforcement.rs: fix assertion for checkpoint scope
* test(server): anomaly signal and containment coverage (#13)
Add integration tests for anomaly detection and containment:
- anomaly_signals.rs: anomaly hooks, containment gate on pull/promote
- sync/client.rs: add promote/promote_scoped methods for test coverage
* test(server): OpenTelemetry metrics contract tests (#22)
Add structural tests for OTel observability wiring:
- opentelemetry_contract.rs: metrics struct wiring, handler integration
* feat(server): audit trail, isolation fixes, and observability wiring (#10, #12, #22)
Core server changes across multiple features:
- process_pull: return audit records for cross-tenant/node mismatch (#10)
- process_push/process_promote: persist audit on all rejection paths (#12)
- index_mutation/build_scoped_indexes: exclude __governance_audit from checkpoints (#12)
- ServerState: add metrics slot with with_metrics() constructor (#22)
- handle_push/pull/promote/retrieve: record OTel metrics (#22)
- Add RangoMetrics with counters for push/pull/promote/retrieval/rejection (#22)
* docs: add OpenTelemetry observability contract (#22)
Add docs/operations/observability.md with metric catalog, span taxonomy,
cardinality budget, and exporter configuration.
chore(gitignore): ignore proptest-regressions artifacts
* chore(deps): update Cargo.lock with OpenTelemetry dependencies (#22)
* feat(server): add health/readiness endpoints and structured logs (#25)
* feat(bench): adversarial benchmark suite — poisoning, leak, replay (#28)
Add Criterion-based adversarial benchmarks with deterministic seeds:
- poisoning_rejection_latency: measure write_path latency for low-trust
- cross_tenant_leak_check: verify zero mutations leak across tenant boundaries
- replay_determinism: snapshot + replay produces identical checkpoint
- push_throughput, pull_latency, audit_persistence: hot-path benchmarks
Infrastructure:
- Convert workspace root to package+workspace for bench hosting
- Add benches/fixtures/adversarial_seeds.json with committed seeds
- Make ServerState methods pub for benchmark access
* feat(python): add PyO3 binding with minimum SDK surface (#35)
Add rango-python crate with PyO3 + maturin:
- PyRangoClient: connect, insert_one, find_one, find_many, update_one, delete_one
- Automatic storage/oplog creation (RedbStorage + FileOplog)
- DX-friendly update wrapping (auto- for dicts without operators)
- Flexible ID parsing (UUID, ObjectId, or string fallback)
- Python sugar layer in rango/__init__.py with Mapping[str, object] types
- .pyi stubs for IDE autocomplete
- 11 integration tests covering CRUD + multi-collection isolation
- maturin develop/build support
* feat(storage): graceful degradation on storage exhaustion (#19)
Add DegradingStorage wrapper that monitors disk space and degrades to read-only:
- Rejects writes with clear error when available space < threshold (default 100MB)
- Reads continue to work during degradation
- Auto-recovers when space frees up
- Configurable check interval to amortize fs2 calls
- Custom space checker injection for deterministic testing
- 4 unit tests: pass-through reads, reject writes, recover, delete blocked
- Python binding now uses DegradingStorage by default
* feat(server): define external capability contracts for vector/graph adapters (#14)
Expand adapter traits with health_check() and adapter_name():
- VectorRetrievalAdapter: query_vector + health_check + adapter_name
- GraphRetrievalAdapter: query_graph + health_check + adapter_name
- AdapterErrorKind: add NotConfigured variant
- Document contract requirements (tenant isolation, parameterized queries, signals)
Reference implementations:
- QdrantAdapter with filter_scope helper and health check
- Neo4jAdapter with parameterized_cypher() helper
- AdapterCapabilities fallback with descriptive names
Conformance tests (9 tests):
- Tenant/namespace scoping
- Parameterized Cypher validation (no string concat)
- Ranking signals presence
- Error kind correctness
- Health check behavior
- Adapter naming
Docs: docs/design/adapter-contracts.md with full contract spec
* feat(node): add napi-rs TypeScript/Node.js binding (#37)
Add rango-node crate with napi-rs:
- RangoClient: connect, insertOne, findOne, findMany, updateOne, deleteOne
- JSON string interface for document serialization (type-safe via TS wrapper)
- DegradingStorage integration by default
- Auto- wrapping for updates without operators
- TypeScript wrapper in rango.ts with Collection class
- Type definitions in index.d.ts
- Jest tests covering CRUD operations
* feat(cli): add audit report generator (#24)
Add 
ango audit subcommand for governance trail reporting:
- Reads __governance_audit entries from oplog
- Filters by tenant_id, namespace
- Supports text, json, and csv output formats
- Shows seq, timestamp, collection, op, tenant, namespace, write_id
Tests:
- audit_command_shows_help
- audit_on_empty_workspace_reports_no_entries
* chore(release): bump version to 0.2.0
- Update CHANGELOG.md with v0.2.0 release notes
- Bump workspace version from 0.1.0 to 0.2.0
- Bump Python binding version to 0.2.0
- Bump Node.js binding version to 0.2.0
* chore(release): update Cargo.lock for v0.2.0
* ci: update workflow for release branch and new crates
- Add trigger for release/* branches
- Add Python binding job (build + test on 3 OSes)
- Add Node.js binding job (build on 3 OSes)
- Add benchmark compile check job
- Fix clippy to fail on warnings (-D warnings)
- Fix checkout action version consistency (v5 everywhere)
* style: apply rustfmt and fix clippy warnings
- Fix formatting across workspace (cargo fmt --all)
- Allow clippy::too_many_arguments on promote_scoped
- Add connection_up/down methods to RangoMetrics to eliminate dead_code warning
- Update CI: use pip3/python3, maturin build on all platforms, tests only on Ubuntu
* ci: fix failing checks (deny, macOS tests, python binding, audit)
- deny.toml: allow async-std transitive via opentelemetry_sdk; ignore RUSTSEC-2025-0052
- ci.yml: setup Python 3.12 in test matrix for PyO3 compatibility on macOS
- ci.yml: use pip install wheel instead of maturin develop in python-binding job
- ci.yml: add checks:write permission to security audit job
* ci: fix deny bans and python binding venv
- deny.toml: remove async-std from deny list (transitive via opentelemetry_sdk)
- ci.yml: use venv + maturin develop for python tests on ubuntu
* deps: bump pyo3 0.23 -> 0.24 to fix RUSTSEC-2025-0020
ci: ignore RUSTSEC-2025-0052 (async-std unmaintained, transitive via opentelemetry_sdk)
* ci: fix audit-check ignore list format (comma-separated)
* style: fix clippy lints in tests for --all-targets
- concurrent_isolation: use !is_empty() instead of len() >= 1
- opentelemetry_contract: remove assert!(true) and prefix unused var
- health_endpoints: use BrokenOplog instead of BrokenOplog::default()

Rango v0.1.0 GA

test(core): add snapshot+rollback deterministic recovery suite (#48)
* test(core): add recovery suite covering crash, bounded replay, and property convergence
* docs(architecture): document recovery and replay contract anchored at snapshots
* style(core): format recovery tests and lock file

v0.1.0-rango-20260426-0019-23645de
fix(server): clear pre-existing clippy errors in routes.rs (closes #4...

v0.1.0-rango-20260425-0045-085b26d
fix(control-plane): harden enforcement in write/read/promotion paths ...