v0.3.4

What's Changed

• docs: defer DISC-001/DISC-002 npm publish track by @kioie in #95
• docs(OPS-001): execution log for PostHog prod alignment by @kioie in #96
• docs(mgfa): Wave B/C Go enablement (E2,E10,E15,E16,E20,E21,E22) by @kioie in #97
• docs(DIST-002): link GTM launch playbooks from DISCOVERY by @kioie in #98
• docs: sync roadmap execution log (OPS-001, DIST-002, MGFA) by @kioie in #99
• docs(E1): watch health SLOs and incident lifecycle by @kioie in #100
• docs(NARR-2): gate ladder progressive strictness + loop glossary by @kioie in #101
• docs(E4): drift audit export API index and MGFA delivery by @kioie in #104
• feat(E3): ToolChange manifest hardening and MGFA change-mgmt by @kioie in #105
• feat(e6): strengthen agents.yaml lint for MGFA binding manifest by @kioie in #106
• docs(E9): SchemaSync literal blocking MGFA refine delivery by @kioie in #107
• ci: enable SonarCloud for OSS client by @kioie in #102
• E17: MockDrift cloud replay MGFA workflow docs by @kioie in #108
• E18 Refine: MockDrift init + fixture marketplace by @kioie in #109
• feat(E22): harness bundle MGFA orchestration and lint phrase mapping by @kioie in #111
• docs(E5): runtime preflight reason taxonomy and MGFA pattern (Wave D) by @kioie in #112
• docs(GTM-1): First week OSS onboarding path in getting started by @kioie in #110
• docs: README namespace + MCP quickstart paths by @kioie in #103
• docs(E13): semantic vs structural drift boundary (MGFA Wave D Refine) by @kioie in #113
• docs(GTM-2): pointer to hosted loop tutorial by @kioie in #114
• docs(ROADMAP-PUB-1): public hosted phase summary and capability matrix by @kioie in #115
• feat(oss-2): scoped npm publish prep by @kioie in #116
• docs(oss-5): npx-first install in quickstart by @kioie in #117
• docs(E23): MockDrift SIEM export guide for partner integration by @kioie in #118
• docs: mark E23 merged in roadmap execution log by @kioie in #119
• E6: assert_a2a_coverage CI gate (CLI, Action, MCP) by @kioie in #120
• docs: mark E6 merged in roadmap execution log by @kioie in #121
• docs(E10): coverage gate template and Go delivery by @kioie in #122
• docs(E12): design-time MGFA keywords and Go delivery by @kioie in #123
• docs(E3): execution log and ToolChange GA positioning by @kioie in #124
• docs: MGFA execution log sync + E8 harness enablement by @kioie in #125
• OSS distribution sprint: description drift + get_watch_status contract by @kioie in #126
• Add npm run ci:local for pre-PR CI parity by @kioie in #127
• Streamline local/CI alignment: Node 22 pin and unified pre-PR path by @kioie in #128
• Add local SonarCloud scan for pre-push feedback by @kioie in #129
• Add local SonarCloud scan and pre-push workflow parity by @kioie in #130
• Point OSS docs at developers.driftguard.org by @kioie in #131
• Document driftguard.co brand collision in DISCOVERY.md by @kioie in #132
• [INGRESS] Offline validate engine, CLI, MCP, and fixtures by @kioie in #133
• [INGRESS] v1 launch docs and CI workflow examples by @kioie in #134
• Ingress phase 5: n8n node, quarantine schema, FuseGuard ingress by @kioie in #135
• chore: document path flags in pre-push hook sample by @kioie in #136
• Ingress positioning: Confluent coexistence and BI boundary guides by @kioie in #137
• Ingress playbook: link Notion-style producer CI example by @kioie in #138
• feat(ingress): agent output contract profile kinds (5.6) by @kioie in #140
• IP boundary policy and migrate strategy docs to cloud by @kioie in #141
• IP boundary policy, ingress profiles, and MCP suspicious severity by @kioie in #144
• build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #142
• build(deps-dev): bump @types/node from 25.9.3 to 26.0.0 by @dependabot[bot] in #143
• feat(cli): MCP lockfile lock/check commands and CI action by @kioie in #145
• docs(mcp): ship lockfile bridge guide (MCP-L1.7) by @kioie in #148
• docs(guides): AP-507 — Agent Protection Hub link-out by @kioie in #149
• feat(fuseguard): FG-PROD-1 OSS runtime kernel and offline fuse by @kioie in #150
• fix(ci): default OpenRouter PR review model to openrouter/free by @kioie in #151
• feat(fuseguard): apply cloud kill switch from heartbeat (FG-S14-04) by @kioie in #152
• feat(fuseguard): FG-S16 OTel/CEF export and sync idempotency keys by @kioie in #153
• feat(fuseguard): FG-S17 IDE extension, policy lint CI, and doctor by @kioie in #154
• feat(fuseguard): FG-S18 GA polish, IP audit CI, and fg-test PR labels by @kioie in #155
• fix(ci): FG labeler use git diff instead of gh pr diff by @kioie in #156
• feat(fuseguard): FG-P03/P05 cost overrides and policy CDN sync (OSS) by @kioie in #157
• feat(fuseguard): FG-P04 device trace pull upload (OSS) by @kioie in #158
• docs(fuseguard): FG-P01/P02 edge env vars and gate-ladder note by @kioie in #159
• docs(mcp-l4): conformance CI cross-links and workflow stub by @kioie in #161
• fix(disc-001): publish under @Drift-Guard npm org scope by @kioie in #162

Full Changelog: v0.3.3...v0.3.4