# Changelog

## v0.5.0 — 2026-05-18

### Added
- 3-tool kernel: mem_mcp, find_mount_mcp, call_tool
- 52 MCP catalog with BM25 semantic discovery
- OS keychain secrets (Windows Credential Manager, macOS Keychain)
- Client tile expansion: copy config, auto-setup, copy rules
- Automated e2e kernel verification harness (52/52)
- mach1cli config and rules commands

### Removed
- All demo/stub cloud endpoints
- Claude Desktop and Codex from supported clients
- Transparent proxy architecture replaced by kernel model

### Fixed
- Auth hardening: rate limiting, email validation, password policy
- UI redirected from cloud to Tauri IPC
- needs_credentials blocks mount before process starts
