# Changelog

All notable changes to this crate are documented here. The format is
based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and
this crate adheres to [Semantic Versioning](https://semver.org/).

## [Unreleased]

### Added

- Initialized: docs-only phase 0 base — SDD process (`docs/sdd_process.md`),
  opencode agent definitions, rust crate manifest (lib only, no
  dependencies yet), MIT OR Apache-2.0 licensing. The russh pin, the
  capability feature graph, and the channel-type mapping table are
  phase 0 research output (family ADR-003, OQ-08 remaining scope).
- Phase 0 research set under `docs/research/`: `vision.md` (scope
  questions), `russh.md` (0.64.1-era inventory + pin considerations),
  `auth-bridge.md` (fingerprint → identity server path; vault-backed
  at-rest client key storage — the vault as secret store, not key
  derivation), `mapping-table.md` (channel type/request → family seam
  + feature), `pocs.md` (POC-1..3 plan).
- Phase 0 completed — all three POCs passed against the current
  published russh with vanilla tooling (121 checks total); findings
  in `poc-1-auth-bridge.md` (31), `poc-2-vault-keys.md` (39),
  `poc-3-mapping-bakeoff.md` (51, three mapping-table corrections
  recorded), plus the reverse-runner client-direction extraction
  (`reverse-runner.md`). POC source is disposable, never merged.
- Phase 1 architecture under `docs/architecture/`: the index +
  open-questions tracker (OQ-01…13), the spec docs
  (`overview.md`, `mapping.md`, `client.md`, `auth.md`), and ADRs
  001–006 (Accepted) — the `alk/ssh` ALPN pin; the russh 0.65.0 pin
  (aws-lc-rs, no compression, `rsa` off); the capability feature
  graph (flat, two-direction, `dynamic-forward` retired); auth
  dispositions; vault-key custody; and the mapping/dispatch
  decisions (route-1 bridge, exec-only git, parse-only session
  dispatch).