XKV 0.4.0 opens its HTTP mode beyond localhost. xkv serve now takes a token file, a second read-only token for dashboards and watchers, and a certificate for TLS, and it won’t listen on an address other machines can reach without a token. Small clients for Python and TypeScript cover every endpoint and keep a watch going across reconnects without losing a change.
The tree of reasons behind a value can now come out as W3C PROV-O in JSON-LD, the format audit and lineage tools read. In the release post, a pricing agent wrote a price over HTTPS from Python, a read-only watcher saw each change with its reason, and the PROV export read back in rdflib with the price traced to the competitor signal and the finance floor behind it.
An independent review found that both clients could send a key like a/../b to a different key, and that a watch could lose a change across a reconnect; both were fixed before the release. Binaries are on the latest release, open source under Apache 2.0.