v0.1.2

Marked as Production/Stable. No functional changes.

v0.1.1

Security hardening.

• Header- and API-key-derived identities are SHA-256 hashed before use as Redis keys (CWE-312)
• Fail-open path logs explicitly that the request was allowed despite the Redis error

v0.1.0 — Rate limiting

Initial release. Token bucket + sliding window, in-memory + Redis Lua backends, IP/user/API-key identities, decorator + middleware. Security review applied before ship — see CHANGELOG.