Changelog

All notable changes to cordon are tracked here.

Unreleased

HMAC capability tokens (mint, verify, refresh, JSON serde).
Bundle with grant, check, merge, scope, intersect, difference, revoke, revoke_all_for, fingerprint, has, filter_by_op.
Hierarchical operation lattice: write implies read implies stat; post implies fetch implies head.
Glob resource matcher with single (*) and double (**) star semantics.
Runtime context manager (cordon) with optional RateLimiter, NonceTracker, and Budget.
Append-only AuditLog with filters, summary, redaction, and replay (derive minimum bundle).
Adapters: filesystem, subprocess, network (injectable transport), environment variables, clock, randomness.
Index for O(1) exact-resource lookups, with glob fallback.
delegate() to derive narrower tokens from a parent capability.
Quota per (resource, op) and global Budget.
CLI: mint, verify, inspect, prune, fingerprint, diff.
Examples: safe_file_read, network_isolation, subprocess_jail.
Benchmarks: token mint/verify throughput; bundle.check vs Index.
Reproducible experiment comparing ambient vs bundled access for an imperfect bundler.