certlord (1.3.0) stable; urgency=medium

  * Validate ACME callbacks, support ECDSA and add the issue permission.
  * Restrict the Certbot environment and harden daemon startup.
  * Normalize certificate domains and HTTP-01 challenge keys.
  * Bind the Debian example to loopback and support a dedicated Vault CA.
  * Include the opt-in experimental CloudFront renewal job.

 -- Adrien Delle Cave <pypi@doowan.net>  Wed, 04 Nov 2026 19:00:00 +0000

certlord (1.2.0) stable; urgency=medium

  * Add independent TLS endpoint checks with explicit connection host and TLS name.
  * Persist bounded observations with freshness, optional pins and read-only metrics.
  * Expose configured checks through API, CLI, curses and Textual.

 -- Adrien Delle Cave <pypi@doowan.net>  Mon, 02 Nov 2026 12:00:00 +0000

certlord (1.1.0) stable; urgency=medium

  * Track version-bound deployment and TLS evidence per named destination.
  * Persist Auton submission intent and support targeted version-checked retries.

 -- Adrien Delle Cave <pypi@doowan.net>  Mon, 02 Nov 2026 08:50:00 +0000

certlord (1.0.1) stable; urgency=medium

  * Bound combined command output and clean up child processes on failures.
  * Align release packaging, installation examples and documentation with 1.0.1.

 -- Adrien Delle Cave <pypi@doowan.net>  Wed, 21 Oct 2026 12:00:00 +0000

certlord (1.0.0) stable; urgency=medium

  * Publish the qualified rc2 feature set as the first stable release.
  * Align installation, evaluation, release notes and captures with 1.0.0.
  * Preserve the documented single-daemon and uncertain-job recovery limits.

 -- Adrien Delle Cave <pypi@doowan.net>  Thu, 08 Oct 2026 15:40:00 +0000

certlord (1.0.0~rc2) UNRELEASED; urgency=medium

  * Add optional Textual certificate inventory and detail browser.
  * Keep the existing HTTP client and read-only terminal contract.
  * Refresh documentation captures and optional interface tests.

 -- Adrien Delle Cave <pypi@doowan.net>  Wed, 07 Oct 2026 00:00:00 +0000

certlord (1.0.0~rc1) UNRELEASED; urgency=medium

  * Prepare the first public release candidate, Python version 1.0.0rc1.
  * ACME issuance/renewal and external PEM import/versioned replacement.
  * Vault KV v2 storage, authenticated HTTP API, CLI and explicit TUI.
  * Auton deployment, optional remote receipts and served TLS verification.
  * Operational observations, bounded shutdown and recovery checks.

 -- Adrien Delle Cave <pypi@doowan.net>  Sat, 03 Oct 2026 00:45:00 +0000
