Changelog

0.2.0 Research baseline

Added deterministic corpus evaluation with content-derived identity and TP, FP, and FN metrics.
Added machine-readable schemas for scan reports, corpus manifests, and evaluation results.
Added rule catalog and rules --format json and explain commands.
Added agent tool-authorization, SLSA provenance, and CycloneDX ML-BOM rules.
Added stable finding fingerprints to JSON and SARIF output.
Added a 12-case safe synthetic conformance corpus.
Added research note, rule-authoring contract, and architecture decision record.

Established safe artifact discovery, deterministic built-in rules, JSON and SARIF reporting, CLI, tests, and project governance.