v0.4.6

Changelog

• 8383e6f Raise testutil coverage above main gate (#32)
• e53ac59 Fix syncframeworks main CI gates (#31)
• 162b0d5 Add framework evidence paths and bump Go to 1.26.1 (#30)
• 53a1017 test: enforce exact brew version match in UAT (#29)
• 3a301d2 test: add brew install path to local UAT (#28)
• 36a84bd ci: pass Homebrew tap token to release goreleaser (#27)
• 353d2b0 fix: address codex review items for installer, error kind, and exit mapping (#26)
• 3e2ac8c test: satisfy core coverage gates for bundle and errors (#25)
• 7f529d0 refactor bundle api, add typed errors, docs/contracts, and framework mappings (#24)

v0.4.5

Changelog

• 54d1095 fix: preserve additive metadata through relationship dedup (#23)
• d65b5c2 test: raise core/record coverage for relationship json paths (#22)
• 8eb54ed fix: preserve additive relationship fields in hash and verification (#21)
• bb456f3 fix: close relationship envelope objects and add tamper regression tests (#20)
• 65733b1 fix: preserve legacy relations alias and relax envelope schema (#19)
• 67262e6 Raise core/record coverage for deterministic helpers (#18)
• 992d615 Add additive relationship envelope and deterministic normalization (#17)
• 4710fe0 Treat policy_enforcement policy_digest as opaque string (#16)
• 76e9925 Allow legacy bare policy digest values for compatibility (#15)
• e9f0749 Add optional record relations for graph-ready lineage (#14)

v0.4.4

Changelog

• fc7963d Add runtime discovery and delegation record types (#13)

v0.4.3

What's Changed

• Fix pending script verdict promotion for compiled_action by @davidahmann in #12

Full Changelog: v0.4.2...v0.4.3

v0.4.2

What's Changed

• Add compiled_action type and governance event promotion by @davidahmann in #11

Full Changelog: v0.4.1...v0.4.2

v0.4.1

Changelog

• 9f7cd15 Fix framework load precedence and gosec path warning (#10)
• 7ec1233 Add filesystem framework loading and clarify starter framework docs (#9)

v0.4.0

What's Changed

• Add scenario framework and compatibility alignment by @davidahmann in #8

Full Changelog: v0.3.0...v0.4.0

v0.3.0

Changelog

• 3873e33 Restore core/framework coverage gate with validation tests (#7)
• ae0b59e Enforce framework required_fields and add systemic drift guards (#6)
• d44ba89 Pin README install commands to v0.2.0 (#5)

v0.2.0

Changelog

• 2ba1eb6 Fail closed chain loading and harden CI/release pinning (#4)

v0.1.0

Changelog

• 8cb6e24 fix release: grant attestations write permission (#3)
• 98d49ef fix release: pass keyless cert identity/issuer in cosign verify (#2)
• 8174120 Fix Windows CLI test binary resolution (#1)
• a79cf9c Fix CI cosign test determinism and relax benchmark baseline
• 56908cf Close PRD gaps: custom types, bundle signatures, determinism, and gait fixtures
• e634c2a Add dedicated local UAT target and script
• 1cdb000 Bump Go toolchain baseline to 1.25.7
• f01b9fb Add Gait compatibility APIs and verify embedded proof records
• 7e152c8 Bump Go baseline to 1.24.12 for govulncheck stability
• b0d3d07 Implement remaining gait compatibility and fix CI security checks
• 128d836 feat: complete proof PRD and dev standards implementation
• 6324bf8 Add hardening features, CI standards alignment, and compliance check
• 175ef9d Add CLI exit code contract tests
• 2c4a895 Harden proof contracts, canonicalization, and verification tests
• 77ccd5d Ignore local proof build artifact
• 7045981 Implement proof primitive with CLI, schemas, frameworks, and tests
• 5a081db Add AGENTS instructions for proof
• a12ced4 Initialize repository with product ignored