v0.59.0

0.59.0 (2026-10-21)

Features

• rulings: ruling rows say when they are no longer as ratified (#1207) (d5a3807)
• rulings: say when an enforcement value of a ruling is withheld (c32ba12)

Bug Fixes

• checks: build armed checks and the guard only from values a reader may see (#1210) (0dc1334)
• checks: build the armed-check manifest and the guard from rows a reader may see (fbbf0e7)
• config: resolve the git user name once per process instead of once per stamped row (#1204) (b717182)
• config: resolve the git user name once per process per working directory (63c99f5)
• heal: retry marker carries project and transcript, fold reads them over the long window (040da7a)
• heal: retry marker carries project and transcript, fold reads them over the long window (#1215) (5ea0c1a)
• refutations: judge visible values in the view instead of diffing masked rows (b1ceee6)
• refutations: match refute search over the values a reader may see (444d636)
• refutations: match refute search over the values a reader may see (#1212) (fbd3480)
• serialize: reject a model dict with the wrong envelope shape at the parse boundary (ea40e26)
• serialize: reject a partial with the wrong envelope shape at the parse boundary (#1219) (539066d)
• serialize: reject misplaced envelope fields, accept an absent block in a partial (2f7991c)

Documentation

• add SECURITY.md with private vulnerability reporting (a5ba745)
• scars: candidate for subprocess helpers that gain per-row callers (6670bd2)