Kulshan v0.4.0
Kulshan v0.4.0 strengthens release qualification and makes report evidence limits explicit.
Added
- Structured preflight capability and pack-readiness reporting.
- Canonical coverage disclosure across JSON, HTML, SARIF, and local history.
- Deterministic billing-data integrity disclosure across JSON, HTML, SARIF, and converted reports.
- Auditable IAM action registry and per-check policy composition.
Fixed
- Corrected IAM ownership and source-coverage validation.
- Made the recorded IAM policy digest independent of operating-system line endings.
- Repaired sdist packaging so wheels rebuild with the policy, registry, and digest included.
- Restored report output integrity plumbing.
Install
Run: pip install kulshan==0.4.0
Kulshan remains local-first, read-only by construction, AWS-only, and telemetry-free.