v0.3.0 — Auth enforcement, audit log, quota control

What's New in v0.3.0

Auth Enforcement

• AUTH <api_key> required before commands (configurable via require_auth)
• SHA3-256 hash comparison (never stores plaintext keys)
• Per-key permission enforcement (read/write/admin)
• Background key registry reload every 3s (live revocation without restart)
• Fail-closed: empty registry + require_auth = daemon won't start

Hash-Chained Audit Log

• Every event hash-chained: SHA3-256(prev_hash || timestamp || sequence || event)
• Tamper-evident: deletion, reordering, modification all detectable
• Persisted to sled DB (survives restarts)
• Merkle root anchoring for periodic integrity snapshots
• 7 event types: StateTransition, VerificationPerformed/Failed, EntryCreated, EntryDeleted, KeyRotation, DaemonStart, MerkleAnchor

Real PQ Verification on Read

• GETVERIFIED now calls bundle.verify() with actual ML-DSA-65, FALCON-512, SLH-DSA
• Returns FullyVerified/VerificationFailed status
• Every verification recorded in audit log

Quota as Access Control

• Per key_id atomic ops counter (not per connection)
• Reconnecting does NOT reset quota
• Two connections sharing same key share counter
• Free/sandbox keys hard-capped

New RESP Commands

• AUDITLOG key — full lifecycle export
• AUDITVERIFY — verify entire hash chain integrity
• AUDITANCHOR — compute Merkle root

40 Tests

31 lib + 9 daemon tests. 0 clippy warnings. cargo fmt clean.

Cachee CLI v0.2.0 — The Four Locks

v0.2.0 — The Four Locks

Cachee transitions from a cache engine to a cryptographic evidence infrastructure.

Lock 1: Computation Fingerprint

Every cached value carries a deterministic computation identity. Two identical outputs from different computations are NOT the same cache entry.

SET mykey myvalue FP <fingerprint_hex>

Lock 2: Invalidation Lifecycle

Explicit state machine: Active, Superseded, Revoked, Expired, Deprecated. State transitions are recorded. No silent eviction of truth claims.

INVALIDATE key REASON "compromised input"
SUPERSEDE old_key new_key
STATE key

Lock 3: Read-Path Trust Contract

Every read optionally returns value + computation fingerprint + verification status + signatures + provenance + lifecycle state.

GETVERIFIED key

Lock 4: Verification Cost Model

Configurable per tenant: always_verify, trust_cached, probabilistic, age_weighted.

Upgrade

brew upgrade cachee

Cachee CLI v0.1.3

v0.1.3 — Full Terminal Deploy

• 7-tier pricing aligned with cachee.ai
• cachee usage shows memory usage, overage, estimated bill
• Unlimited tier: 10TB memory cap, $5,000/TB/mo overage
• Memory tracking for all tiers
• Billing summary in usage output (PAYG estimated cost, unlimited overage)

Cachee CLI v0.1.2

v0.1.2 — 7-Tier Pricing

Aligned CLI billing with cachee.ai pricing page.

Tier	Price	Ops
Free	$0	1M trial
Pay-As-You-Go	$15/1M	Usage-based
Starter	$199/mo	20M
Scale	$999/mo	200M
Institutional	$9,999/mo	10B
Institutional+	$24,999/mo	50B
Unlimited	$99,999/mo	No cap (10TB memory)

Unlimited includes 10TB memory. $5,000/TB/mo beyond.

brew upgrade cachee
cachee plan list

Cachee CLI v0.1.1

Cachee CLI v0.1.1

• Added Unlimited tier ($99,000/month) — no ops cap, all features
• Stripe billing fully wired (starter, professional, enterprise, unlimited)
• All 5 tiers visible in cachee plan list

Install / Upgrade

brew upgrade cachee

Cachee CLI v0.1.0

Cachee CLI v0.1.0

The world's first post-quantum caching service — now installable from your terminal.

Install

Homebrew (macOS Apple Silicon):

brew install h33ai-postquantum/tap/cachee

Manual download:

curl -L https://github.com/H33ai-postquantum/cachee-cli/releases/download/v0.1.0/cachee-0.1.0-aarch64-apple-darwin.tar.gz | tar xz
sudo mv cachee /usr/local/bin/

What's included

• cachee init — Generate config + keypair
• cachee start — Daemon on port 6380 (RESP protocol)
• cachee set/get/del — Cache operations
• cachee attest — Enable PQ attestation (ML-DSA-65 + FALCON-512 + SLH-DSA)
• cachee bench — Built-in throughput/latency test
• cachee cluster join — D-Cachee federation

Platform

• aarch64-apple-darwin (Apple Silicon Mac)
• More platforms coming in v0.1.1