Kulshan changelog.

Reports persist. Cost coverage gets deeper.

V0.2 is an active workstream. Items listed here are either already on this branch/master or scheduled for this release. The release date is set only when the code lands.

// Already landed / in branch

• Top Actions ranking and reporting improvements (terminal, JSON, HTML)
• HTML and site work currently on the v0.2/redesign branch
• /sample, /policy, and /changelog pages

// Planned before V0.2 release

• SQLite scan history with score deltas
• Deeper cost checks: CloudWatch Logs ingestion analysis, S3 request decomposition, AWS Config cost awareness, cross-AZ data transfer detection
• "AWS Tax" rollup (Config, GuardDuty, Security Hub, Inspector, CloudTrail)
• HTML report visualizations (Sankey diagram, cost treemap, severity heatmap), if they ship
• TOML config file support, if confirmed

Initial local AWS baseline release.

The first version of Kulshan. V0.1 established the local-first AWS baseline workflow and the composed read-only IAM policy. Public sample artifacts show HTML and JSON report shapes for synthetic data.

Read-only AWS access from the start. The composed IAM policy ships with the source. Every action is Get, List, or Describe. The full policy and per-pack policies are at /policy.

The CLI and report surface should be checked against the installed package before documenting specific flags or shell integrations.

• Local-first AWS baseline workflow
• Kulshan report as the primary quickstart command
• Synthetic HTML and JSON sample artifacts for reviewing report shape
• Read-only IAM policy: 146 actions, 30 service prefixes, all Get/List/Describe
• Read-only IAM policy and per-check policy files published on the website
• Cost Explorer API coverage in the published policy