v0.9.7
February 8, 2026Security & CI/CD Complete
Enterprise security features and 100% test coverage
v0.9.7 "Security & CI/CD Complete" achieves 100% CI/CD test coverage with comprehensive security features. All tenant isolation tests passing, multi-layer security protections, and compliance documentation for GDPR/HIPAA/SOC2.
Key Features
100% Test Coverage
All CI/CD tests passing across all workflows. Comprehensive test suite covering core functionality, tenant isolation, security features, and integration scenarios.
Tenant Isolation
Complete tenant isolation with RLS (Row Level Security) policies, automatic owner membership creation, and comprehensive test coverage ensuring data separation.
Security Scanning
Comprehensive security scanning infrastructure with shellcheck, static analysis, and automated vulnerability detection across all shell scripts.
Rate Limiting & DDoS Protection
Multi-layer rate limiting with configurable thresholds, DDoS protection mechanisms, and traffic shaping for production deployments.
Compliance Documentation
Complete GDPR, HIPAA, and SOC2 compliance guides with implementation checklists, audit trails, and regulatory requirements mapping.
Related commands:
nself tenant compliance gdprnself tenant compliance hipaanself tenant compliance soc2Secrets Management
Production-ready secrets management with .env.secrets protection, vault integration, and automatic secret rotation capabilities.
Related commands:
nself config vault initnself config vault setnself config vault rotateStructured Logging & Audit Trails
Comprehensive logging infrastructure with structured JSON output, audit trails for all operations, and centralized log aggregation.
Related commands:
nself logs --structurednself historynself tenant auditBug Fixes
- Fixed JSONB value extraction in tenant settings tests
- Added -q flag to db_query_raw to suppress psql command tags
- Made trigger function SECURITY DEFINER to bypass RLS
- Auto-create owner as tenant member to resolve RLS chicken-and-egg
- Fixed tenant isolation tests workflow failures
- Converted inline partial UNIQUE constraints to separate indexes
- Fixed .env.secrets protection (Bug #5)
- Fixed SQL injection vulnerabilities in vault and tenant systems