v0.8.4

What's Changed

• build(receipt_verify): run the CLI contract tests in the default test gate by @peycheff-com in #812
• docs: correct six stale status claims against their own evidence files by @peycheff-com in #819
• chore(cpi): delete the cgo bridge to a Rust crate that never existed by @peycheff-com in #821
• docs(rfc): policy-bundle-v1 documented a bundle layout and CLI that do not exist by @peycheff-com in #823
• docs(rfc): canonical-json-v1 §6.2 called an unimplemented page normative by @peycheff-com in #827
• docs(conformance): the guide's external-implementation runner does not exist by @peycheff-com in #822
• docs(policy-schema): canonicalization.md documented a Rust crate that has never existed by @peycheff-com in #820
• fix(chart): let the authority init accept a verified pre-existing root key by @peycheff-com in #824
• chore(core): mark go-isatty direct so go mod tidy stops emitting stray diffs by @peycheff-com in #813
• ci(lint): fail the lint gate when core/go.mod is not tidy by @peycheff-com in #829
• ci(lint): tidy the three stale test modules and widen the gate to all modules by @peycheff-com in #831
• chore(tools): raise doccheck, invcheck and tcbcheck to go 1.25.12 by @peycheff-com in #833
• fix(cli): truth, contracts, setup narrative, and safer discovery by @peycheff-com in #832
• feat(mcp): wire the GitHub connector through the governed bridge on a shipped path (W1 keystone) by @peycheff-com in #835
• build(release): prepare-version repins SDK manifests and names the missing Console pin by @peycheff-com in #818
• docs(reference-packs): fixtures, not runs — and the documented verify command fails by @peycheff-com in #817
• ci(launchpad): pin the reference-pack gate to go 1.25.12 like every other workflow by @peycheff-com in #834
• Trace the daemon serve path: a span, a route and a flush (HELM-495) by @SergeyAP in #830
• fix(receipts): isolate Console and onboarding by tenant (HELM-363) by @Hirama in #836
• fix(logging): keep daemon output structured by default by @mindburnlabs in #837
• fix(compliance): add mapping-only EU AI Act v2 with amended applicability dates by @peycheff-com in #806
• docs(integrations): ZeroID page promised an impersonation defence the code refuses to provide by @peycheff-com in #825
• chore(release): prepare v0.8.4 by @Hirama in #838
• docs(traction): "HELM AI Enterprise Individual" is not a product and its control plane is not released by @peycheff-com in #826
• fix(release): correct v0.8.4 console sidecar pin by @mindburnlabs in #839
• fix(release): make published drift retry executable by @mindburnlabs in #840
• docs(use-cases): receipt page promised a signature guarantee 13 of 76 fields wide by @peycheff-com in #828
• fix(cli): finish v0.8.4 discoverability and preview UX by @mindburnlabs in #841

Full Changelog: v0.8.3...v0.8.4