diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 554e34bb..f81bf992 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.30.0"
+  ".": "0.31.0"
 }
\ No newline at end of file
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ea0da87f..5dc9f38f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,195 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.31.0](https://github.com/ConfigButler/gitops-reverser/compare/gitops-reverser-v0.30.0...gitops-reverser-v0.31.0) (2026-07-07)
+
+
+### ⚠ BREAKING CHANGES
+
+* bumping crd versions and last edits
+* validating webhook is required (even is audit has been configured).
+* **api:** the configbutler.ai API group is now served only at v1alpha2; v1alpha1 manifests and clients must be updated to v1alpha2.
+* providerRef no longer accepts a Flux GitRepository (group/kind enum values removed), and the per-Secret insecure_ignore_host_key key is replaced by the --insecure-allow-missing-known-hosts controller flag. See docs/UPGRADING.md for migration steps.
+* Field rename for clarity (please check configuration.md)
+
+### Features
+
+* --author-attribution={true|false} is now allowing you to enable or disable the need for kube-api configuration (at the cost of loosing the real author). ([7860294](https://github.com/ConfigButler/gitops-reverser/commit/7860294b237ac9e944e1dac8561d6e7a2111b3cd))
+* /readyz now waits for healthy audit ingress and valid pingable Reds connection ([c10a4da](https://github.com/ConfigButler/gitops-reverser/commit/c10a4da3c0ca3b3daf62466ee401c5fd6a95eb90))
+* Adding valkey to allow experiment with 'persistant' queues ([a0a15a5](https://github.com/ConfigButler/gitops-reverser/commit/a0a15a5b9e1fe17e1b5379bff012ce6e6d631b13))
+* allow end-user to create explicit commit with specific message (which also ends the automatic commit window). ([abd6a48](https://github.com/ConfigButler/gitops-reverser/commit/abd6a48fed972a1d50d6f7304183766829db0021))
+* Allowing commit author and message config ([04a592b](https://github.com/ConfigButler/gitops-reverser/commit/04a592b03d5244cf36bbb18ac05c99c6cffc8b98))
+* **api:** rename API group version v1alpha1 -> v1alpha2 ([a7c4dcd](https://github.com/ConfigButler/gitops-reverser/commit/a7c4dcd71329a87cfa4655b6892f8dcb20daf6ee))
+* audit webhooks it is ([ff31254](https://github.com/ConfigButler/gitops-reverser/commit/ff312545657f83bc24773a95cca6299e20f6356d))
+* bumping apiservice-audit-proxy and it's all TLS now ([9d431c2](https://github.com/ConfigButler/gitops-reverser/commit/9d431c27cc7a01d41d78337f59c8130d3e7b2c14))
+* bumping crd versions and last edits ([4fcffa3](https://github.com/ConfigButler/gitops-reverser/commit/4fcffa319f5b9406f8d4921a34cd53ba7f670794))
+* commit signing ([5e8ad9c](https://github.com/ConfigButler/gitops-reverser/commit/5e8ad9cc0613a476dcf2a08695909e64478cb7bc))
+* CommitRequest can be attributed by validating webhook handler since it's an internal command ([58dd37a](https://github.com/ConfigButler/gitops-reverser/commit/58dd37a8b2d3e408bff555f71d841a3b0cb17152))
+* **commitrequest:** controller-driven, audit-attributed finalize (C-B2) ([cc426d8](https://github.com/ConfigButler/gitops-reverser/commit/cc426d8f74c7ec28895f2d73612ed10659dfe5a8))
+* **commitrequest:** eager message attach (stage 4) ([d5113a1](https://github.com/ConfigButler/gitops-reverser/commit/d5113a119328b3014df6a71f13e40cbe003d4c1a))
+* **commitrequest:** resolve-on-push with the pushed SHA (stage 5) ([c9093d3](https://github.com/ConfigButler/gitops-reverser/commit/c9093d3d07dbd28d80410dfacb0cfd98a4499005))
+* **commitrequest:** the Rejected outcome with a structured reason (stage 6) ([d800fb4](https://github.com/ConfigButler/gitops-reverser/commit/d800fb41f24e7b4425d67ca299b3691c0144e6c5))
+* count loc ([f819e9a](https://github.com/ConfigButler/gitops-reverser/commit/f819e9a5ed445b78388108510df5afed216d9486))
+* deduplicated audit ingestion for aggregated API, removes the option to indicate cluster id ([35443db](https://github.com/ConfigButler/gitops-reverser/commit/35443dbc8062da13feb807017314df5b12a1467e))
+* demand driven audit ingestion (only for types that we need) ([dbfce5e](https://github.com/ConfigButler/gitops-reverser/commit/dbfce5ef5d18706fa08110ecb1a6c7cf57f45d38))
+* Field rename for clarity (please check configuration.md) ([9f101b0](https://github.com/ConfigButler/gitops-reverser/commit/9f101b0737396ebf4361e17792b35ebe5148e0b4))
+* first phase for commit batching based on author ([e742e8c](https://github.com/ConfigButler/gitops-reverser/commit/e742e8c2950589298ab4844818bfa212e80a2d1c))
+* **gitops-api:** place new resources to match the repo's existing layout ([#202](https://github.com/ConfigButler/gitops-reverser/issues/202)) ([97a9c87](https://github.com/ConfigButler/gitops-reverser/commit/97a9c8793847efb6a2fba5a9626490e1bbfb9ee7))
+* immutable gittargets and gitdestinations ([167a800](https://github.com/ConfigButler/gitops-reverser/commit/167a800a1906fedc4d93fc3295d2a3ac834b3716))
+* **kustomize:** edit images/replicas overrides through to kustomization.yaml ([#198](https://github.com/ConfigButler/gitops-reverser/issues/198)) ([a8ce917](https://github.com/ConfigButler/gitops-reverser/commit/a8ce917a211d30c7ff4f6c6d82bf0acccbac97c2))
+* let's get all testing to Kubernetes 1.36 ([905ff29](https://github.com/ConfigButler/gitops-reverser/commit/905ff29fd5bec5a3cf4cbc2c29409337bdf82fe3))
+* **manifestanalyzer,git:** refuse unsupported GitTarget folder content in the writer ([6264d5d](https://github.com/ConfigButler/gitops-reverser/commit/6264d5d72426a476aa798f2ce4f4d6c599394d92))
+* metrics overhaul as a step into more observability ([1a7cd19](https://github.com/ConfigButler/gitops-reverser/commit/1a7cd19ea416fb4dfe69271867aab9034695ab75))
+* Move gitea setup to Makefile (also allowing to have the repos under the .markers) ([ea434fe](https://github.com/ConfigButler/gitops-reverser/commit/ea434fe25377170a2d285f9f6957dd04c76be50a))
+* prevent nested gittargets ([c407fa4](https://github.com/ConfigButler/gitops-reverser/commit/c407fa43339f954beba70a33aa10ccd8f3b43c39))
+* read Flux/Argo credential Secrets; drop Flux GitRepository providerRef ([fc7a765](https://github.com/ConfigButler/gitops-reverser/commit/fc7a76529c0fe49851314870e7b6fdb8c42af351))
+* refuse weird files in GitTarget path, but do allow .gittargetignore ([1bf3820](https://github.com/ConfigButler/gitops-reverser/commit/1bf3820fdba20d919075189d6c0813f16587d919))
+* rename snapshotTemplate to reconcileTemplate, and default now includes type and last resourceVersion ([e26676d](https://github.com/ConfigButler/gitops-reverser/commit/e26676d960b0fe7c8e42a779c1adb93695097b8b))
+* replacing Makefile by Taskfile ([bd3b709](https://github.com/ConfigButler/gitops-reverser/commit/bd3b70929d01f16136882d1a78704c5d66e26e12))
+* require value for GitTarget.Path, since hooking up GitTarget to repo root must be deliberate ([39e02a6](https://github.com/ConfigButler/gitops-reverser/commit/39e02a68e8b7857f0d87677810db327a12a12233))
+* reworking metrics to new architecture ([b502afe](https://github.com/ConfigButler/gitops-reverser/commit/b502afe512501345df5795899a40484103d87b7c))
+* **status:** two-axis GitTarget status (Ready + Synced/phase), serviceability roll-up ([cea0b35](https://github.com/ConfigButler/gitops-reverser/commit/cea0b353c90a028d61d13e939687809b97869c83))
+* **stream:** /scale rides the parent type's stream (DEC-A, stages C-A1+C-A2) ([4741e66](https://github.com/ConfigButler/gitops-reverser/commit/4741e66e066f0a474dccf131834baec158e2ec48))
+* support --additionalSensitiveResources (in addition to v1/secrets) ([3ae1ebd](https://github.com/ConfigButler/gitops-reverser/commit/3ae1ebd0e10afd73b66737269889a76b586b94e7))
+* support "offical_first" for situations where the offical kube-api audit events arrives slightly before the additional body event. ([380dc1e](https://github.com/ConfigButler/gitops-reverser/commit/380dc1e94c62c9a70f1253cb79236567d7b0c30f))
+* support claim based commit author attribution ([06eaf8c](https://github.com/ConfigButler/gitops-reverser/commit/06eaf8c99d43305caa826301e4246f8b1ed8263e))
+* support flexible manifest placement / editting ([d43d268](https://github.com/ConfigButler/gitops-reverser/commit/d43d268bee4ca41229fc480237ff6c56620fc0cb))
+* support for subresources (working kubectl scale deployment) ([0f34d50](https://github.com/ConfigButler/gitops-reverser/commit/0f34d50f06a2f098f7b05c93488c98436bc7efd4))
+* switching to apiservie-audit-proxy ([1843cff](https://github.com/ConfigButler/gitops-reverser/commit/1843cff72795370683c1983a2414ca8c2e555e2b))
+* **typeset,watch:** M12 first slices — type lifecycle events + per-type reconcile/sweep ([e3f0bd8](https://github.com/ConfigButler/gitops-reverser/commit/e3f0bd85a3d361707736e66e809e886e3a691e09))
+* **typeset:** registry owns discovery grace; catalog shrunk to a per-scan normalizer ([6d0dba4](https://github.com/ConfigButler/gitops-reverser/commit/6d0dba48e7962b3556d794a1a301c87eb4520f58))
+* validating webhook is required (even is audit has been configured). ([96ec390](https://github.com/ConfigButler/gitops-reverser/commit/96ec39066741b434887ec08115b7748813a7dba1))
+* watch-first ingestion ([28389c9](https://github.com/ConfigButler/gitops-reverser/commit/28389c99848035073fcd4aac367dd80c4c674560))
+* **watch:** CommitRequest watermark barrier primitive (C-B1) ([781bfd6](https://github.com/ConfigButler/gitops-reverser/commit/781bfd6dfee9d02de5d575c2551c570a7b287525))
+* **watch:** diff watch-derived vs audit-derived desired sets (Phase 1 payoff) ([c8ba472](https://github.com/ConfigButler/gitops-reverser/commit/c8ba472bd1d0c20391c1185ebb31ccf492dd3995))
+* **watch:** parallel watch-state stream behind --watch-state-stream ([097230b](https://github.com/ConfigButler/gitops-reverser/commit/097230b8c600b997f20e7e3f0c172ef253ec9b0b))
+* **watch:** surface a refused GitTarget folder as a Blocked stream ([5bdc43d](https://github.com/ConfigButler/gitops-reverser/commit/5bdc43dbab861c7eef1d9c20a511837aeb087399))
+
+
+### Bug Fixes
+
+* allow generated names with a commit request ([#155](https://github.com/ConfigButler/gitops-reverser/issues/155)) ([ff27eba](https://github.com/ConfigButler/gitops-reverser/commit/ff27ebaa1b1872d095325057a6d36dae707b0471))
+* Allow GitTarget to respond quickly to changes in the tracked GitFolder ([591d310](https://github.com/ConfigButler/gitops-reverser/commit/591d3100efa59745b59d332e48979febf68f539d))
+* Always check these things yourself ([ce9031d](https://github.com/ConfigButler/gitops-reverser/commit/ce9031d6e059dcfa6a06e34819a0389677b8e5e3))
+* audit messages that indicate conflict (409) can't end up in Git anymore (should never happen given that they also don't end up in etcd). ([ec47c52](https://github.com/ConfigButler/gitops-reverser/commit/ec47c5227126f625064326c57fad5f94789be314))
+* better reconcile ([f3dcf56](https://github.com/ConfigButler/gitops-reverser/commit/f3dcf56e5135b455bdc0a8bd1b20651fb6cdb12e))
+* central APIResourceCatalog so that we have one abstraction/cache to which things the current apiserver is serving. ([3d6cb62](https://github.com/ConfigButler/gitops-reverser/commit/3d6cb6258a168da6ad82e0c17a459efacb3ecbe3))
+* **ci:** free runner disk after image loads; diagnose e2e rollout timeouts ([#187](https://github.com/ConfigButler/gitops-reverser/issues/187)) ([b89432f](https://github.com/ConfigButler/gitops-reverser/commit/b89432f4113d965f38926c1b744c938f345424bf))
+* **ci:** pin Trivy platform when scanning release digests ([#191](https://github.com/ConfigButler/gitops-reverser/issues/191)) ([08d557d](https://github.com/ConfigButler/gitops-reverser/commit/08d557dd7c386b4645916ad25ff0399177454c03))
+* **controller:** retry Declare on the settle cadence instead of stalling 10m ([b4cafce](https://github.com/ConfigButler/gitops-reverser/commit/b4cafce24951069b41778a726b14f63d0c5ebe55))
+* **e2e:** deliver image via k3d direct mode, keep retry + pin verification ([#186](https://github.com/ConfigButler/gitops-reverser/issues/186)) ([31abd14](https://github.com/ConfigButler/gitops-reverser/commit/31abd1448a53cab8923e8553d052b37e0f94f178))
+* **e2e:** gate cluster readiness on healthy API discovery ([5b81718](https://github.com/ConfigButler/gitops-reverser/commit/5b81718b88a34b043cc42d39fe8d5d4448641010))
+* **e2e:** retry k3d image import when the tools-node tarball race drops the image ([#185](https://github.com/ConfigButler/gitops-reverser/issues/185)) ([e426206](https://github.com/ConfigButler/gitops-reverser/commit/e426206921899afb274aa8886f1c1a71c31502da))
+* first relevant commit can also include optional files (is now included). ([5801b5d](https://github.com/ConfigButler/gitops-reverser/commit/5801b5d6f29b7e0841d835041a89a434ff7ebdf6))
+* fixing flaky e2e test ([83e9f17](https://github.com/ConfigButler/gitops-reverser/commit/83e9f17f69a03a1f75aff0cf1a0a9300029c4aea))
+* gate audit body joins by rule relevance ([605964a](https://github.com/ConfigButler/gitops-reverser/commit/605964ab046e14ae8ae6463da45ab44d2ea2e3c3))
+* Getting all paths right ([77ac054](https://github.com/ConfigButler/gitops-reverser/commit/77ac05436bdad42a5233e971cdf132c749a189ce))
+* Getting the image insertion at least a little bit straight ([ff31576](https://github.com/ConfigButler/gitops-reverser/commit/ff3157690088e226d79ba8331f47ae05a5f11bf9))
+* **git:** push a window closed by a no-op resync (stage 3) ([103ad36](https://github.com/ConfigButler/gitops-reverser/commit/103ad360d6a2b679f63ebbaf8b229a592fe860d8))
+* gittarget can just be created without existing gitprovider (don't block, just give a good error). ([ee20cfd](https://github.com/ConfigButler/gitops-reverser/commit/ee20cfd68481ad022314a0261ac6c1449c20fa93))
+* green CI — guard anonymous-access nil deref and skip audit webhook TLS for committer-only e2e ([1e23e16](https://github.com/ConfigButler/gitops-reverser/commit/1e23e16f2a2d7ef20ed084fcdf8d0d2bd799c914))
+* Handle deletion 'updates' by checking for terminating and deletionTimestamp ([fdf4214](https://github.com/ConfigButler/gitops-reverser/commit/fdf421425940a35a55b668c5b740d2fb73efeef7))
+* Have working printcolumns ([eca9ae8](https://github.com/ConfigButler/gitops-reverser/commit/eca9ae8cc448b0682e1c484feb8d969abc581600))
+* **heal:** drain a deferred heal when an atomic finalizes the window; fix drifted comments ([23c881b](https://github.com/ConfigButler/gitops-reverser/commit/23c881b5bcf10b887ad1fa364873349ff9564ad3))
+* **heal:** restore periodic checkpoint healing via a deferred-until-idle heal resync ([9a06fe8](https://github.com/ConfigButler/gitops-reverser/commit/9a06fe8a5e7d85e5e1eec3f82476bea3395c68b0))
+* ignore subresource audit events (that was hard to debug!) and replaced debug dump mechanism ([#153](https://github.com/ConfigButler/gitops-reverser/issues/153)) ([23a2d65](https://github.com/ConfigButler/gitops-reverser/commit/23a2d6585c4f7055b0b45a736ca7cfb194aa46c1))
+* improve and test GitTarget isolation behaviour ([0787b1b](https://github.com/ConfigButler/gitops-reverser/commit/0787b1b68bd9eb47ea3b816712f8eb09861f6d6b))
+* Kind and docker outside docker ([e94be0c](https://github.com/ConfigButler/gitops-reverser/commit/e94be0c100c0c7cd718111484c0fd174e3db781b))
+* Let's get the linter happy again ([ce18453](https://github.com/ConfigButler/gitops-reverser/commit/ce18453873a2110fe5fac421d325bf2bf7d90b1a))
+* Linting errors in Makefile ([05faf7c](https://github.com/ConfigButler/gitops-reverser/commit/05faf7c10abe5dedc447de858d4b750ec1da5ed7))
+* **materialization:** retry a failed Declare-time initial backfill ([af6c5b8](https://github.com/ConfigButler/gitops-reverser/commit/af6c5b85e6a02923bfea123271d96124dd5908f6))
+* Mistake in Makefile syntax ([2a8820a](https://github.com/ConfigButler/gitops-reverser/commit/2a8820a083df8e15a666cafa4ebce33ea0596612))
+* Now we can really uninstall, also multiple if that would already be supported ([241bb13](https://github.com/ConfigButler/gitops-reverser/commit/241bb135dca2ae5c2417bb692261f1fb59e45388))
+* One edgecase where a secret is deleted (is now recreated) ([3a3f139](https://github.com/ConfigButler/gitops-reverser/commit/3a3f13970295fc05e01a310aa851b3bd12202aa4))
+* prevent PrepareBranch call for cold cases ([f760c36](https://github.com/ConfigButler/gitops-reverser/commit/f760c36f0410262326c2a015b64dee4938d9aceb))
+* prevent race in creating gitea org ([ddbcbb3](https://github.com/ConfigButler/gitops-reverser/commit/ddbcbb399fea816e6d63614330b3fbba3ce5f0c0))
+* Preventing reconcile code from ignoring ns boundary ([d3b0ecf](https://github.com/ConfigButler/gitops-reverser/commit/d3b0ecf9670ef5caefd6fcf2dfe601efd26542a9))
+* preventing warning on k3d creation DoD style ([30a8208](https://github.com/ConfigButler/gitops-reverser/commit/30a8208e1061e89ef6d574fcd938d8df456ca8fc))
+* race condition in HelmRelease causing unstable e2e tests ([03b95ab](https://github.com/ConfigButler/gitops-reverser/commit/03b95abfae8a52552729872231441c1e1ac2cbc5))
+* readds support for wildcards ([8e1b3ab](https://github.com/ConfigButler/gitops-reverser/commit/8e1b3ab15d03c3fad9eb002c1293ab3623ccb6ca))
+* Really patch the status so that the test makes sense ([bbad230](https://github.com/ConfigButler/gitops-reverser/commit/bbad230c8bba6a21a4d5af8178f8fd48630e4d83))
+* reconicle fail on restart and wildcard ([26511a9](https://github.com/ConfigButler/gitops-reverser/commit/26511a967e4145f2ae691b191f9da1b408dc2932))
+* **release:** sign and attest GitHub release assets directly ([#201](https://github.com/ConfigButler/gitops-reverser/issues/201)) ([10f8962](https://github.com/ConfigButler/gitops-reverser/commit/10f8962f61cf1ac7da5bab08f5373fda61028862))
+* resolving a flaky unit test ([04715a2](https://github.com/ConfigButler/gitops-reverser/commit/04715a283db835adac038481e33f2a39283b5656))
+* showing spec.message at commitrequests ([54225eb](https://github.com/ConfigButler/gitops-reverser/commit/54225eb7713c4796a6d8d6da6d581733b84de2b3))
+* Some tweaks to cleaning existing installs, and moving to a seperate file ([22e960e](https://github.com/ConfigButler/gitops-reverser/commit/22e960ea904b3f960f18ea9ced156b9c8d3d0e3f))
+* The order in which the dependencies is (perhaps to?) important ([a38102a](https://github.com/ConfigButler/gitops-reverser/commit/a38102ac41f7c7a90981f92e59be42384c8cf56e))
+* timing issues when adding a new WatchRule in e2e: simplifying the ingestion resolves this ([a688620](https://github.com/ConfigButler/gitops-reverser/commit/a688620e3d6832afb2976f3f542edfb005d977a9))
+* upgrade to latest a apiservice-audit-proxy should resolve our non 0 shallow events, also included tests to verify that we don't misread deletecollection events as shallow ([903d792](https://github.com/ConfigButler/gitops-reverser/commit/903d7920162ecd56b9d863666959fc7f7d77e3e1))
+* wainting for the right status to return ([cc701d6](https://github.com/ConfigButler/gitops-reverser/commit/cc701d645a2e4318e9af2f90459a0cd5bae5cf43))
+* watch for changes in dependent resources ([8c9aeb8](https://github.com/ConfigButler/gitops-reverser/commit/8c9aeb8b2c51187cc6d6b9dd05bd7f6452c19d97)), closes [#145](https://github.com/ConfigButler/gitops-reverser/issues/145)
+* **watch:** only backfill-reconcile a type on its first TypeSynced ([8f2ad84](https://github.com/ConfigButler/gitops-reverser/commit/8f2ad840179880723427546f3eff2c8e6f22c0ee))
+* WatchRule leaking resources from other namespaces in live event stream ([1676a42](https://github.com/ConfigButler/gitops-reverser/commit/1676a423ad30df094acfcb21890f786ba16d9248))
+
+
+### Performance Improvements
+
+* **build:** cache Go build + module dirs in Dockerfile builder ([#194](https://github.com/ConfigButler/gitops-reverser/issues/194)) ([55ed662](https://github.com/ConfigButler/gitops-reverser/commit/55ed662f92bf0c882f1f10a62ae1146258b563b2))
+
+
+### Documentation
+
+* Adding and removing ai stuff ([4d0ac12](https://github.com/ConfigButler/gitops-reverser/commit/4d0ac12d0a1f7e3c87e36c32a80f95b7e9d7fc18))
+* adding architectural overview ([e932402](https://github.com/ConfigButler/gitops-reverser/commit/e93240203d2675a9d9799f4fd372ebc99327eb0b))
+* adding DAG overview of tasks ([#177](https://github.com/ConfigButler/gitops-reverser/issues/177)) ([f7a8b6a](https://github.com/ConfigButler/gitops-reverser/commit/f7a8b6a024423f4ceb8c1bdbd117a2428a354a1a))
+* adding designs with use cases ([31b7857](https://github.com/ConfigButler/gitops-reverser/commit/31b78577d2c08ac8aecc72d86ffaa9cd17afa61b))
+* adding skills and working on status design ([e55b63a](https://github.com/ConfigButler/gitops-reverser/commit/e55b63a1d5d3a835be5e39400e12a2bffe34d25e))
+* Adjusting docs to how it all works now ([f8c7796](https://github.com/ConfigButler/gitops-reverser/commit/f8c7796976aa15df2ba2194f0dd2276c0e8c05e3))
+* and simpler ([c27f7ab](https://github.com/ConfigButler/gitops-reverser/commit/c27f7ab94c5a91ff516eebade8454b82f8d452e4))
+* And the last claude additions for today ([76191b3](https://github.com/ConfigButler/gitops-reverser/commit/76191b3b22d04c2c4c4944ba8e430390ab95be68))
+* architecture tweaks and cleaning docs ([f9aca70](https://github.com/ConfigButler/gitops-reverser/commit/f9aca70f19f6e6a7b0e05e29ac948e639bde5a17))
+* capture contextual-namespace + SOPS single-file decisions, add folder fixtures ([1bd8af7](https://github.com/ConfigButler/gitops-reverser/commit/1bd8af7fd7778006a953d74774b7bc30a45dc031))
+* cleaning and moving to finished ([bb79343](https://github.com/ConfigButler/gitops-reverser/commit/bb7934301be8fdc2c16c0abd59a5f7a95facef57))
+* cleaning branch work ([d07233a](https://github.com/ConfigButler/gitops-reverser/commit/d07233ac7acfbe1288a552f49be16f9f39348ed8))
+* cleaning up and more clarity ([51396a2](https://github.com/ConfigButler/gitops-reverser/commit/51396a23be4282d9a724f58149ef94b92e66abc6))
+* Cleaning up docs ([96b249d](https://github.com/ConfigButler/gitops-reverser/commit/96b249d7597829a8fb3b1274a770790c4a76aa52))
+* cleaning up old docs ([791d2f9](https://github.com/ConfigButler/gitops-reverser/commit/791d2f908db24d6305d773b6cf1ef25b3d721ec5))
+* continue designing for this approach ([27ba3db](https://github.com/ConfigButler/gitops-reverser/commit/27ba3dbf0192a9cbf421af7c86d089472bbecaa0))
+* continue docs clean-up, and other small things from review ([80c380c](https://github.com/ConfigButler/gitops-reverser/commit/80c380c0bf53167ddbd8bd641c70c6c7a66ca288))
+* created new plan, and hopefully found why the tests are so flaky ([9e610e6](https://github.com/ConfigButler/gitops-reverser/commit/9e610e68e04a748a9ef1cb12b6f5a2c6cd5cb0a6))
+* desiging the next phase ([c2d3ce8](https://github.com/ConfigButler/gitops-reverser/commit/c2d3ce86e48cc6518e6c22edd96b5efb02edecfc))
+* designing gittargetignore ([19ffc7e](https://github.com/ConfigButler/gitops-reverser/commit/19ffc7e6e04e8646c886ee0ed92bf8e6de9b8e78))
+* document learnings, and some tests to see how this behaves ([64a0c19](https://github.com/ConfigButler/gitops-reverser/commit/64a0c1967c6710afbfb731922ca2b315e5cf0e02))
+* fighting over abstractions, and what the exact value is of certain parts ([f9227fc](https://github.com/ConfigButler/gitops-reverser/commit/f9227fc4f2fd43f9f12fcd52107675013ae540c3))
+* final review on architecture.md ([046b538](https://github.com/ConfigButler/gitops-reverser/commit/046b53804a3344b210565b821d9bc0dd6950a3d2))
+* first design ([7d60c22](https://github.com/ConfigButler/gitops-reverser/commit/7d60c223330edb920931de70ece05302b12fe1ed))
+* getting all design docs together so that we can cleanup ([17339c0](https://github.com/ConfigButler/gitops-reverser/commit/17339c0c453690414a62dae6e08adf53fe4e48d5))
+* getting audit ingestion ([63de7d8](https://github.com/ConfigButler/gitops-reverser/commit/63de7d8f104a52d1a020ed0d7dcc136d6f9beac9))
+* getting better ([7bd1f32](https://github.com/ConfigButler/gitops-reverser/commit/7bd1f32d94e4806da73ed234c51185b0be3d4c24))
+* getting claude to review it again, with some questioning of my own ([e133724](https://github.com/ConfigButler/gitops-reverser/commit/e133724c7e99200d589e8617ac1d65849b0fa42c))
+* getting codex feedback ([a42145c](https://github.com/ConfigButler/gitops-reverser/commit/a42145c1af6bffd36090e1bc0de14bd6d682984a))
+* getting docs in and small fixes and tests ([160640a](https://github.com/ConfigButler/gitops-reverser/commit/160640a18e06ad027fed62f1f2875244b276f0db))
+* getting docs in line and reporting on current findings ([76929d8](https://github.com/ConfigButler/gitops-reverser/commit/76929d8f3d4bb6e85e96b224897fe78e727d54f4))
+* getting more details in the plan ([135820b](https://github.com/ConfigButler/gitops-reverser/commit/135820bb42114102227337600668ab74bf03f9d3))
+* getting more whys into the architecture document ([5762a4a](https://github.com/ConfigButler/gitops-reverser/commit/5762a4a31029b6cb52051bb16f4cf26aa46d3306))
+* Getting next steps in ([ac12d25](https://github.com/ConfigButler/gitops-reverser/commit/ac12d25494ded69094ad037be13e78a0145a7545))
+* getting started hints for aggregated API usage ([7d86434](https://github.com/ConfigButler/gitops-reverser/commit/7d864340cfceb568ea0e86fe3c0cbe5647b44bff))
+* getting the plan ready for execution ([6eb3787](https://github.com/ConfigButler/gitops-reverser/commit/6eb378744ad9fdd8177642f4514c9a9666f5d897))
+* Improving docs ([dc411c6](https://github.com/ConfigButler/gitops-reverser/commit/dc411c691820a3f6fae75871cd965028dc9510f1))
+* Improving quick-start quality by moving to helm ([cf25552](https://github.com/ConfigButler/gitops-reverser/commit/cf255528d422358945e7fa2acad3b09bbff1f260))
+* initial docs (also some findings from preps for Cozysummit) ([fbbfcec](https://github.com/ConfigButler/gitops-reverser/commit/fbbfcec75309577e33bf36243361428dea81002b))
+* investing in good designs is worth it I guess ([4cb5f45](https://github.com/ConfigButler/gitops-reverser/commit/4cb5f45c318af72286f7c543d063187254ee3d4e))
+* let clean it up a little bit for now ([026443a](https://github.com/ConfigButler/gitops-reverser/commit/026443a57ffd58c3317beb9793ddddb95d06528e))
+* Let's get an elaborate description of the e2e tests ([9091712](https://github.com/ConfigButler/gitops-reverser/commit/9091712d51571418cd00175b0ee52edd1c292be2))
+* Let's just commit it then ([401d194](https://github.com/ConfigButler/gitops-reverser/commit/401d194e56b9424184f557ae1d5fd8376cec33d6))
+* **materialization:** correct the stale watch-first sync comment; scope Slice D ([c3e6122](https://github.com/ConfigButler/gitops-reverser/commit/c3e612282864d88717256496cdc2a034a7d7adad))
+* More details in the document ([1b51f1c](https://github.com/ConfigButler/gitops-reverser/commit/1b51f1c6c0041bc31f25e9cc878b5983f344ee35))
+* moving architecture along with the rewrite ([6e1193a](https://github.com/ConfigButler/gitops-reverser/commit/6e1193a444f81bd402bee257f9c85888b4b7b51f))
+* Phase 2.5 status + Monday resume plan (3-agent CI green once; stability TBD) ([b285ac5](https://github.com/ConfigButler/gitops-reverser/commit/b285ac5e84a936143f3040e5f9b66a7de8b36764))
+* planning and designing for new features ([856beee](https://github.com/ConfigButler/gitops-reverser/commit/856beeed5f6ab3717a2d3010edaa914cdff0e44b))
+* planning the implementation ([d6e174b](https://github.com/ConfigButler/gitops-reverser/commit/d6e174bd6e483f2f181d843aa728ea7d01b81a1b))
+* reconcile residual-flake findings across the stream design docs ([90a1e7e](https://github.com/ConfigButler/gitops-reverser/commit/90a1e7ea0a0b144e4236d4ab21bf1b0f068c440d))
+* record Phase 2.5 implementation status and measured impact ([dba83ac](https://github.com/ConfigButler/gitops-reverser/commit/dba83ac962c749e744788416419625daefabedda))
+* reorder readme steps for devcontainer ([#178](https://github.com/ConfigButler/gitops-reverser/issues/178)) ([7856f69](https://github.com/ConfigButler/gitops-reverser/commit/7856f692a14e3d605c547174527e8ab1ee314b0a))
+* reworking docs and tuning the new CRD ([8ebceaf](https://github.com/ConfigButler/gitops-reverser/commit/8ebceafb9c6a81bda31a5b6545397db6508d5758))
+* second design ([2146289](https://github.com/ConfigButler/gitops-reverser/commit/21462898095621f4589907e9bbda73ade2e2d762))
+* some claude ([5315440](https://github.com/ConfigButler/gitops-reverser/commit/53154403e1bf078b5f9c506e02b27d6e41108477))
+* the plan is ambitious now I would say ([24457fb](https://github.com/ConfigButler/gitops-reverser/commit/24457fb3c928d04267133960b7990a6bb0511c5d))
+* **typeset-grace:** pin the exact typeset surface, consumers, and per-stage interface delta ([8e45ff8](https://github.com/ConfigButler/gitops-reverser/commit/8e45ff84e75cee0b55e2102207a234ce60fe0776))
+* Working on plans ([7bb77bb](https://github.com/ConfigButler/gitops-reverser/commit/7bb77bb843cac543696d8471e36e8a3f114c0f52))
+* working on refining the design of this new pipeline ([7b15e2d](https://github.com/ConfigButler/gitops-reverser/commit/7b15e2dc70e6a1f2fe758364d5f5c30ef92ad029))
+* working on vision docs ([394d8bf](https://github.com/ConfigButler/gitops-reverser/commit/394d8bfc1c2bb24c0a48667e68f668ee989ccdd0))
+
 ## [0.30.0](https://github.com/ConfigButler/gitops-reverser/compare/gitops-reverser-v0.29.2...gitops-reverser-v0.30.0) (2026-07-07)
 
 
diff --git a/charts/gitops-reverser/Chart.yaml b/charts/gitops-reverser/Chart.yaml
index 6056ec40..08813dc0 100644
--- a/charts/gitops-reverser/Chart.yaml
+++ b/charts/gitops-reverser/Chart.yaml
@@ -4,8 +4,8 @@ description: >-
   A Kubernetes controller for two-way GitOps synchronization - reverse sync from
   Kubernetes to Git
 type: application
-version: 0.30.0
-appVersion: 0.30.0
+version: 0.31.0
+appVersion: 0.31.0
 keywords:
   - gitops
   - kubernetes
diff --git a/charts/gitops-reverser/values.yaml b/charts/gitops-reverser/values.yaml
index 355712a9..80b260bd 100644
--- a/charts/gitops-reverser/values.yaml
+++ b/charts/gitops-reverser/values.yaml
@@ -13,7 +13,7 @@ deploymentStrategy:
 image:
   repository: ghcr.io/configbutler/gitops-reverser
   pullPolicy: IfNotPresent
-  tag: 0.30.0 # x-release-please-version
+  tag: 0.31.0 # x-release-please-version
 
 imagePullSecrets: []
 nameOverride: ""