Release v0.9.0: Hostile Precision & Lab Gallery#66
Merged
Conversation
docs(changelog): record ADR-013 addition in [Unreleased] (EN/IT).
Add 🔍 to Zenzic Sentinel (docs-portal audit) and rename Final Guard to Zenzic-Doc Final Guard for cross-repo consistency.
…an, CREDENTIAL_SECRET sync
Prose fixes:
- 'frictionless sentinel' → 'Frictionless credential scanning' (privacy-gate EN+IT)
- {#the-sentinels-filter} → {#integrity-filter} (structural-integrity EN+IT)
- 'Visual State Guardian' → 'UI State Manager' (architecture.mdx)
- 'SENTINEL:' CLI output → 'NOTICE:' (cli, engines, migrate-engines EN+IT)
- '# sentinel:' YAML job → '# zenzic-check:' (cli EN+IT)
- {#shield-behaviour} → {#credential-scanner-behaviour} (advanced-features EN+IT)
- '_category_.json is automatically shielded' → 'excluded from' (configuration)
- 'Sovereign Override (404 Shield)' → '(404 Suppression)' (sovereign-override)
- 'when Sentinel reports' → 'when Zenzic reports' (sovereign-override)
- 'The Siege' → 'Credential Scanner Live Demo' (first-audit EN+IT)
- #step-2-siege → #step-2-credential-scanner (index EN+IT)
- 'sentinel in your pipeline' → 'static analyzer' (exit_strategy)
- 'The sentinel exists to protect' → 'The analyzer exists' (exit_strategy)
- Saga VI chronicle links removed (exit_strategy, licensing, evolution_policy EN+IT)
- 'sentinel was blind' → 'validator was blind' (architecture-gaps)
- 'Sentinel in Action' → 'Zenzic in Action' (zenzic-style EN+IT)
- 'report Sentinel' → 'report Zenzic' (IT zenzic-style)
RELEASE.md: rewritten to lean 50-line standard (was 261 lines)
…s, scanner-how-it-works anchor, neutral Lucide icons, @site IT badge paths, fix blog dead links, fix phantom Z205 + release-codenames, Big-O prosa Phase 36, suppression_cap=49, no lazy suppressions (ADR-042/ADR-044)
…d bootstrap script (ADR-042 fleet alignment)
- docs/how-to/workflow-integration.mdx: track 'zenzic=={version}' pin
- i18n/it/.../workflow-integration.mdx: same for Italian locale
- Fixes gap identified in cross-repo version audit: live pinned-version
tip block was not covered by bump automation
ADR-072 — Version-centric narrative debt eradication: - blog/2026-05-07-log-v070-quartz.mdx: remove v0.7.0/Phase N labels, use functional headings - blog/2026-05-10-v080-basalt-namespace-contract.mdx: remove v0.8.0/Phase 8 narrative anchors - blog/2026-05-12-engineering-basalt-deep-dive.mdx: remove all v0.8.0/'current release' references - blog/2026-04-29-tutorial-stop-broken-links.mdx: minor agnostic prose polish - blog/tags.yml: tag metadata cleanup - developers/explanation/architecture-gaps.mdx: remove Basalt/version narrative labels (EN+IT) - developers/how-to/write-plugin.mdx: agnostic prose alignment - docs/reference/suppression-policy.mdx: remove version-era Phase references (EN+IT) - docs/tutorials/examples.mdx: Z108 entry + examples matrix polish (EN+IT) ADR-073 — Phase→Pass/Step algorithmic terminology migration: - docs/explanation/architecture.mdx: Link Validation Pipeline Phase→Pass (Pass 1/1.5/2/3) - docs/explanation/privacy-gate.mdx: scalability table Phase→Pass - docs/reference/checks.mdx: circular links Phase 1.5/2→Pass 1.5/2 - docs/reference/finding-codes.mdx: Z101/Z102 technical context Phase→Pass (EN+IT) - docs/reference/engines.mdx: Pagination note 'Phase 2'→'future milestone' - docs/reference/configuration-reference.mdx: heading 'Phase 2'→'Suppression CAP' - docs/how-to/migrate-engines.mdx: migration playbook Phase 1-4→Step 1-4 - docs/explanation/mineral-path.mdx: update 'use version number'→'use agnostic prose' (EN+IT) Z601 governance hardening: - zenzic.toml: add Phase 0-9 to brand_obsolescence blocklist Result: just verify → EXIT 0, 100/100, 0 Z601 findings
…n mineral-path (ADR-044) docs/explanation/mineral-path.mdx (EN): - L22: Quartz row: zenzic-ignore: Z601 → zenzic:ignore: Z601 - L23: Basalt row: zenzic-ignore: Z601 → zenzic:ignore: Z601 - L30: CHANGELOG example: zenzic-ignore: Z601 → zenzic:ignore: Z601 i18n/it/…/mineral-path.mdx (IT mirror — parità bilingue): - L22/L23/L30: same normalization applied Result: --audit now shows 8 warnings with canonical colon syntax; zero behavioral change (suppression still active in normal mode)
…or isolation (ADR-044/075) Reporting Levels — Semantic Audit Footer (ADR-075): - New section in suppression-policy.mdx (EN + IT) - Define four states: Clean State, Managed Debt, Extended Debt, Critical Debt - Document footer examples and suppression_cap configuration - Formalize the semantics of [MANAGED DEBT] and [EXTENDED DEBT] labels One-Way Mirror Isolation (ADR-044 enforcement): - ecosystem.mdx: Remove Structum references from description and ecosystem table - discovery.mdx: Replace 'Artificial Intelligence agents' → 'specialized tools' - the-zenzic-trinity.mdx: Neutralize Structum cartography reference - finding-codes.mdx: Replace 'AI-generated content' → 'malicious content' - engines.mdx: Replace 'Artificial Intelligence agents' → 'specialized tools' Result: - ✅ Parità bilingue confirmed (EN + IT mirror parity) - ✅ Nuclear grep: ZERO violations (only User-Agent HTTP header remains) - ✅ zenzic check all --strict: PASS with [EXTENDED DEBT] footer
…ml for configure-ci-cd.mdx The regex entries already cover the exact format — having both caused bump-my-version to fail on the second pass after the first entry had already replaced all occurrences. DIA: Nessun Impatto
…ly on CI evidence github.com, shields.io, contributor-covenant, twitter, facebook, zenzic.dev/developers exclusions are disabled until CI actually fails on those URLs. DIA: Nessun Impatto
…tion - Rewrite add-badges.mdx (EN+IT): Dual-Badge Telemetry overview, CI badge setup, DQS stamp setup, Red Badge as local signal, Time-Traveling badges, CI/CD integration (fail-fast gate), CI/CD automation (contents:write, if:always(), conditional commit), multi-file stamping - Fix @v1 atemporality: replace pythonwoods/zenzic-action@v1.1.0 → @v1 - Sharpen CI/CD Integration prose: "fail the pipeline" intent made explicit - cli.mdx (EN+IT): replace --export-shields with --stamp; add inline badge stamping section with colour table and red-badge-as-local-signal note - configuration-reference.mdx: add badge_stamp_files to [project_metadata] - README.md: CI badge (zenzic-audit) replaces Audit badge; Score migrated from Gist endpoint to --stamp; badge_stamp_files = ["README.md"] - CI workflow renamed to zenzic-audit; badge alt text normalised to alt="zenzic-audit" / alt="zenzic-score" (lowercase kebab)
…n add-badges guide CI/CD Integration section now documents --check-stamp instead of the git diff --exit-code approach. Notes that zenzic-action runs the check automatically by default (opt-out: check-stamp: 'false'). EN+IT updated.
…d update release manifesto ADR-015 documents the decision to validate DQS badge freshness natively via --check-stamp, replacing the external git diff bash gate. Eliminates the Zero-Config Default pillar violation introduced by manual CI scripts. Blog post log-v080 updated: date corrected to 2026-05-30, Native Telemetry Validation section added.
Updated brand-kit.mdx (EN+IT): links now point to /releases/latest (valid URL) with the direct download path documented as inline code. The clickable link validates cleanly; the direct URL activates automatically on the next release when brand-kit.zip is attached.
brand-kit.zip is a GitHub Release asset, not a local git-tracked file. The path ../../assets/brand/brand-kit.zip would never exist in a clone. Replaced with ../../assets/brand/svg/zenzic-wordmark.svg (a real tracked file) to keep the path-symmetry example correct and verifiable.
…ate translated ledgers
…badge_stamp_files configuration
…gn fail_under to real debt
…mples gallery (20 scenarios) - ZenzicOutput.tsx: fix BreachOutput Pick to include 'code' prop (TS2322) - finding-codes.mdx EN/IT: Z204 banner → POLICY VIOLATION DETECTED - privacy-gate.mdx EN/IT: [core] table header + Exit Behavior section - examples.mdx EN/IT: 20-scenario matrix (5 → 20)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
This release aligns the documentation portal with Zenzic Core v0.9.0,
introducing terminology precision, UI clarity, and a complete empirical
lab gallery.
What Changed
Hostile Precision — Z204 UI Terminology
finding-codes.mdx(EN + IT): Z204 output banner updated fromSECURITY BREACH DETECTEDtoPOLICY VIOLATION DETECTED.The distinction is intentional: Z204 is a governance enforcement
finding, not a credential leak. Both are Exit 2 and non-suppressible.
privacy-gate.mdx(EN + IT): added Exit Behavior sectiondocumenting the two-banner contract (Z201 → SECURITY BREACH,
Z204 → POLICY VIOLATION). Fixed
[core]TOML table header.ZenzicOutput.tsx: fixedBreachOutputTypeScript props —codeprop was missing from the
Pick<>type (TS2322).Lab Gallery — 20 Scenarios
examples.mdx(EN + IT): scenario matrix expanded from 5 → 20 rows.Each of the 15 new entries covers a previously undocumented Z-code
(z102, z103, z105, z108, z202, z204, z301, z302, z303, z402, z403,
z501, z502, z503, z505) with expected exit code, engine, and prose.
Archive & Housekeeping
changelogs/archive files.Checklist
just verify— exits 0[0.9.0] - 2026-05-31