v3.9.0

3.9.0 (2026-10-30)

Features

• detectors: SEC-24 detects tag-character and variation-selector smuggling (#517) (e6609d2), closes #441

Bug Fixes

• detection: embed each text once per scan, on each pipeline's own generator (#520) (3da797c)
• keep the generated authorization registration internal in every package (#513) (a10fa24), closes #512
• read the LLM escalation verdict from its severity field and fence the flagged content (#515) (5d6ea26)