v0.1.0

v0.1.0 (2026-05-26)

Added

• CLI with 5 commands: generate, verify, audit, report, sbom
• SBOM generation for AI models (base model, datasets, adapters, hyperparameters, dependencies)
• Provenance tracking with cryptographic verification (SHA-256)
• SBOM export to CycloneDX 1.6, SPDX 2.3, and ModelChain custom format
• Supply chain auditing with vulnerability correlation (OSV.dev + built-in CVE DB)
• SHA-256 integrity manifests with constant-time comparison
• Model fingerprinting and version diffing
• Compliance reporting for EU AI Act (Art. 9-15) and NIST AI RMF 1.0
• Rich console, JSON, and HTML (Jinja2 autoescaped) reporters
• SBOM schema validator (CycloneDX, SPDX, ModelChain)
• mcp-taxonomy integration, MCPGuard policy generation, MCPscop export
• 223 tests with 90% coverage, ruff 0 errors, mypy 0 errors
• 3 security audit rounds (26 findings fixed)
• GitHub Actions CI/CD and PyPI publishing workflows