Skip to content
Ironflow is pre-1.0: APIs can change between releases. Pin a version. What is ready →

Ironflow v0.38.0

This release closes a set of policy-engine gaps where deny rules could silently fail to match, plus two small dashboard timeline fixes.

  • Platform policies now use the same 7-segment IRN grammar as every other policy check — previously they were written with a 3-segment pattern that could never match a real request, so some platform deny rules were silently inert (#2294)
  • Malformed IRN resource patterns are now rejected at every policy write path, instead of being accepted and failing to match later (#2284)
  • Policy write requests now preflight the actual action being carried, and decide scope from the parsed AST rather than guessing from the request shape (#2306)
  • Closed remaining gaps in the self-lockout preflight check for policy writes (#2308)
  • Fixed the dashboard time-travel hover tooltip rendering outside the timeline rail (#2268)
  • The timeline scrubber now defaults to even event spacing (#2303)
  • Documented the workspace-local command path for the reference app (#2291)