v0.4.3

Recovery closures carry a structured resolution_reason (required by the API when resolving or dismissing), exposed on the verification.

v0.4.2

Verifications carry a flat decision field (verified, pending, not_observed, failed, mismatched, duplicated, reversed, policy_failed, indeterminate, unavailable) derived from the result and lifecycle, and observation_assurance naming how the underlying state was read.

v0.4.1

Regenerated against the current API surface: next_reverify_at on verifications, the transparency witness state, last_verified on the assurance registry, and the observed VCR audit.

v0.4.0

Fixes the package entry point: the exports map pointed at a source file the tarball never shipped, so importing the package threw ERR_MODULE_NOT_FOUND. Now builds with tsup and ships ESM, CJS and declarations.

Adds guard(), webhook signature verification, and the standard postcept.* span attributes. Idempotency keys are derived from the request body instead of a random UUID, so a retry after a crash no longer verifies the same action twice.