Changelog

Unreleased / 1.0.0-beta.1 (stabilization)

Durable run store (runs.redb) with schema versioning, events, checkpoints, resume
Workflow Approve / Reject / Resume / Events HTTP APIs (/api/workflows/runs/:id/...)
Web auth for non-loopback binds (PEERCLAW_API_TOKEN / web.api_token), CORS allowlist, body + rate limits
Trusted-peer filter for P2P job offload; unsigned job requests rejected
Doctor checks for runs DB, web auth posture, MCP, and LAN readiness
Vitest coverage for workflow action client paths
Python SDK canonical /api/workflows/* helpers + API token support

MessagePack ExecutionTask payloads are required for remote/local provider job execution (fail closed)
Risky host tools default-denied unless explicitly allowed
A2A message/send returns unsupported instead of echoing
Escrow create/release skipped when economy.enabled = false
Web navigation simplified to Chat / Workflows / Network / Settings; token balance hidden