v1.2.9: Tenth Man Release Verification, Lockfile Hardening & Git Tag Realignment

🛡️ GhostCheck v1.2.9 Release Notes

🚀 Highlights & Hardening Improvements

• Lockfile Synchronization & CI Hardening: Synchronized uv.lock with project dependencies, eliminating lockfile desynchronization failure where pyproject.toml diverged from the lockfile and guaranteeing seamless uv lock --check and --locked CI runs.
• Git Tag Chain Integrity: Restored full Git release tagging history across all historical milestones (v1.2.6, v1.2.7, v1.2.8, v1.2.9).
• User-Facing Documentation Sync: Updated README.md, README_zh-TW.md, and product backlog with modern AI-era security features (Anthropic MCP security guidelines, Data exfiltration detector, Context inflation detector, Zero-false-positive agent rules).
• Tenth Man & Expert Roundtable Verification: Passed rigorous adversarial challenge and unanimous Five-Perspective Expert Roundtable approval (Security Architect, Tenth Man/Red Team, Release Engineer, DX, QA).

🌟 Cumulative Highlights in v1.2.x Series

• v1.2.8: Multi-Framework Simulation Suite (Cursor, Claude Code, LangChain, LlamaIndex, CrewAI, AutoGen, enterprise MCP) & Agent rules defensive context hardening (zero false positives on negative guardrails).
• v1.2.7: Anthropic MCP Deep Defense (unpinned stdio package execution, broad root filesystem mount, insecure SSE binding, cloud metadata SSRF protection).
• v1.2.6: Python AST Constant Folding (f-string and string concatenation unpack depth guard), default data exfiltration activation, ignorefile last-matching semantics.

🧪 Verification Evidence

• Test Suite: 363 / 363 tests passed in 28.20s (100% GREEN).
• Self-Scan Security Grade: Grade A (100/100) with 0 CRITICAL / HIGH / MEDIUM / LOW findings.
• CLI & Packaging: Verified ghostcheck version reports 1.2.9 and clean wheel/sdist packaging.
• Repository Integrity: .agentcortex/bin/validate.ps1 integrity checks passed.