# Changelog

## 0.2.0 Research baseline

- Added deterministic corpus evaluation with content-derived identity and TP, FP, and FN metrics.
- Added machine-readable schemas for scan reports, corpus manifests, and evaluation results.
- Added rule catalog and `rules --format json` and `explain` commands.
- Added agent tool-authorization, SLSA provenance, and CycloneDX ML-BOM rules.
- Added stable finding fingerprints to JSON and SARIF output.
- Added a 12-case safe synthetic conformance corpus.
- Added research note, rule-authoring contract, and architecture decision record.

## 0.1.0 Foundation

- Established safe artifact discovery, deterministic built-in rules, JSON and SARIF reporting, CLI, tests, and project governance.