Skip to content

CHANGELOG.md

Latest commit

 

History

History
44 lines (29 loc) · 4.17 KB

CHANGELOG.md

File metadata and controls

44 lines (29 loc) · 4.17 KB

Changelog

All notable changes to the FSI Agent Governance Framework are documented here, organized by major version.

The format is based on Keep a Changelog, and this project adheres to semantic versioning.

[1.4.2] — April 30, 2026 (Phase B′ Triage Fixes)

Patch release closing out the three P2 items deferred from v1.4.1. Markdown export customer header now escapes special characters so admin-entered names render correctly in raw source (#168); the vendored xlsx.full.min.js is marked binary in .gitattributes so Windows checkouts no longer flip its SRI hash via CRLF normalization (#169); and two locally-flaky Playwright specs (14-fetch-failure, 28-perf-budget) are hardened with deterministic ordering and a more realistic perf threshold (#170). Phase B″ triage report (#171) confirmed 0 P0/P1 findings — recommended ship. See CHANGELOG-v1.4.md for the full entry.

[1.4.1] — April 30, 2026 (E2E Test Infrastructure & SPA Hardening)

Quality + assurance release. No control catalog changes. Ships an end-to-end Playwright test suite (~60 specs across smoke, regression, edge cases, accessibility, and production probes), 4 new CI workflows (including SheetJS supply-chain SRI verification and post-deploy production smoke), branch protection as code, and 12+ assessment SPA hardening fixes covering saved-list integrity, storage quotas, formula-injection defenses, prototype-pollution guards, CSP allowlist enforcement, and per-assessment filter namespacing. See CHANGELOG-v1.4.md for the full entry.

[1.4.0] — April 2026 (Assessment Tool Unification & Solutions Bridge)

Added

  • Unified manifest schema: Single source of truth (assessment/manifest/controls.json) for Python scoring engine and assessment SPA with 11 additive fields per control
  • Solutions bridge: Cross-repository integration with FSI-AgentGov-Solutions v1.4.0 via committed solutions-lock.json (35 solutions indexed)
  • 10 SPA enhancements: How-to-verify drawer (E1), zone auto-exclusion (E2), collector evidence import (E3), role filter (E4), sector calibration for 8 institution types (E5), priority starter set of 5 foundation controls (E6), Next Session Agenda export (E7), inline evidence/notes capture (E8), facilitator mode with hints and time budgets (E9), 7 per-role pre-session homework pages (E10)
  • Harvest script: scripts/harvest_manifest_extension.py scaffolds v1.4 fields from existing control docs with TODO placeholders for author-judgment content
  • 3 validators: Manifest schema validator, solutions lock validator, and lock refresh script with tag pinning
  • Portal export envelope (v1.4.1-prep, additive): SPA exportJSON and exportRoleSection now emit a _metadata block (framework version, export schema version, manifest commit hint, pillar names, schema type) plus _computedScores (pillar/overall percentages and counts) and a derived assessmentStatus enum (draft/in-progress/final). Existing top-level state keys are preserved, so v1.3.x consumers continue to work unchanged. Importer silently drops snapshot fields and recomputes on next export. See CHANGELOG-v1.4.md and assessment/data/README.md.

Changed

  • Control count normalization: Fixed stale "71 controls" / "72 controls" references to "78 controls" across all documentation
  • Version bump: 1.3.3 → 1.4.0 across README, mkdocs.yml, CITATION.cff, and meta references

Breaking Changes

  • Assessment SPA export schema: JSON export format incompatible with v1.3.x—no migration tool provided; recommend completing in-progress v1.3 assessments before upgrading or re-running from scratch with v1.4 collector import
Version Period File
v1.4.x (current) April 2026 CHANGELOG-v1.4.md
v1.3.x March–April 2026 CHANGELOG-v1.3.md
v1.2.x and earlier October 2025 – March 2026 Archived — see git history prior to April 2026