plugins/governance/v1.8.1
maximhq/bifrostplugins/governance/v1.8.1Sep 18, 2026by akshaydeo
Upgrading?
AI Summary
The governance plugin receives updates to improve billing security, validate credentials, and enhance logging with governance entity names.
Key Highlights
- Fixed billing-idempotency key mixing to prevent charge suppression
- Virtual key credentials are now validated before session admission
- MCP tool logs now record governance entity names (user, team, customer, business unit)
- Governance errors are now classified into a normalized vocabulary
- Model allow and block lists now accept regex: entries
New Features
- MCP tool logs record governance entity names
- Endpoint-attributed MCP inspections carry bounded identity
- Governance error classification
- Regex support for model allow/block lists
Full Release Notes
## Plugin Release: governance v1.8.1 - fix: the billing-idempotency key mixes in the internally minted `BillingNonce`, so caller-forged `x-request-id` duplicates can no longer suppress charges (#7303) - fix: virtual key credentials are validated before realtime session admission (#7317) - chore: upgraded core to v1.9.1 and framework to v1.7.1 - feat: MCP tool logs record governance entity names beside their IDs, so the plugin stamps `user_name`, `team_name`, `customer_name`, `business_unit_name` and the multi-valued team, customer and business-unit sets onto the log entry at ingestion instead of leaving the dashboard to render raw UUIDs (#7154) - feat: endpoint-attributed MCP inspections carry bounded identity (device, app key, server label, tool name, decision) from the gateway into the MCP authorization path, so an inspected tool call is attributed without trusting payload-supplied headers (#6959) - feat: governance errors are classified into the normalized `error_type` vocabulary, so a 429 raised by a governance rate limit is distinguishable from an upstream 429 on `bifrost_error_requests_total` (#7141) - feat: model allow and block lists accept `regex:` entries. The `*_patterns` fields added earlier in this release window were withdrawn in favour of the prefix form, which needs no new schema fields (#6988, #7133, #7134) - fix: `UsageTracker.Cleanup()` cancels and waits for the periodic reset worker before taking its final budget and rate-limit snapshots. It previously dumped first, so `trackerCancel()` could cancel an in-flight rate-limit dump and fail with `failed to dump rate limits to database: context canceled`, and the final dump was not guaranteed to be the tracker's last database writer. A queued ticker event can no longer start another reset cycle during shutdown, the current cycle stops when the tracker context is cancelled, and `context.Canceled` is treated as an expected result only when that context was actually cancelled (#7099) [@Constantine3](https://github.com/Constantine3) ### Installation ```bash # Update your go.mod to use the new plugin version go get github.com/maximhq/bifrost/plugins/governance@v1.8.1 ``` --- _This release was automatically created from version file: `plugins/governance/version`_
Related Repositories
ollama/ollama★ 184,214
Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.
fatedier/frp★ 110,052
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
infiniflow/ragflow★ 92,613
RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs
gohugoio/hugo★ 90,197
The world’s fastest framework for building websites.
junegunn/fzf★ 83,716
:cherry_blossom: A command-line fuzzy finder