# Changelog

## 0.1.1

- Packaging/metadata-only patch: the registry description states the canonical product positioning (AI governance platform for the action layer: permissions, approvals by authorized persons, spending limits on routed actions, sealed decision record), keywords expanded for registry search, and the README opens with the product definition. No functional changes; the shipped code is unchanged.

## 0.1.0 — candidate

- Shared concurrent entitlement reads and prevented pre-refresh requests from replacing refreshed discovery data.
- Forwarded optional caller-declared provenance on brokered requests so the daemon can apply the same risk rules as action requests.

- Added bounded work, approval, entitlement and receipt reads.
- Added agent-manager card reads/decisions, with explicit decision binding.
- Added separate person-only access revocation client.
- Preserved daemon-derived identity, fixed destinations, effect-key safeguards and redacted federated material.
- Added native package consumer tests and release policy; TypeScript declarations and Python PEP 561 metadata.
- README method list now advertises the complete read and card surface; every advertised method is covered by the package tests.

- Reported deferred decisions instead of hiding them, and added resume across the three SDKs (Go `Resume`, Python `resume`, TypeScript `resume`): a deferred action is resubmitted unchanged under the same effect key via POST /v1/action/resume.
- Added brokered resume (Go `ResumeBrokered`, Python `resume_brokered`, TypeScript `resumeBrokered`): a standing brokered deferral is revalidated and executed through the connector via POST /v1/brokered/resume, and a brokered resume never reports a grant without a confirmed execution as success.
- Mapped a 404 from the resume routes to a refusal carrying the daemon's reason verbatim, falling back to the canned no-deferral sentence only when the 404 body states none; a missing deferral is answered without extra advice fetches, and decode errors name the resume route.
- The TypeScript package publishes under the `@aaes-ai` npm scope (`@aaes-ai/sdk`), matching the GitHub organization and the Go module path; `@aaes/sdk` was never published, so the rename carried no migration cost.

This entry describes the source candidate, not a published registry release.