Skip to content

Release v0.9.0: Hostile Precision & Lab Gallery#66

Merged
PythonWoods-Dev merged 144 commits into
mainfrom
release/v0.9.0
May 31, 2026
Merged

Release v0.9.0: Hostile Precision & Lab Gallery#66
PythonWoods-Dev merged 144 commits into
mainfrom
release/v0.9.0

Conversation

@PythonWoods-Dev
Copy link
Copy Markdown
Contributor

Summary

This release aligns the documentation portal with Zenzic Core v0.9.0,
introducing terminology precision, UI clarity, and a complete empirical
lab gallery.


What Changed

Hostile Precision — Z204 UI Terminology

  • finding-codes.mdx (EN + IT): Z204 output banner updated from
    SECURITY BREACH DETECTED to POLICY VIOLATION DETECTED.
    The distinction is intentional: Z204 is a governance enforcement
    finding, not a credential leak. Both are Exit 2 and non-suppressible.
  • privacy-gate.mdx (EN + IT): added Exit Behavior section
    documenting the two-banner contract (Z201 → SECURITY BREACH,
    Z204 → POLICY VIOLATION). Fixed [core] TOML table header.
  • ZenzicOutput.tsx: fixed BreachOutput TypeScript props — code
    prop was missing from the Pick<> type (TS2322).

Lab Gallery — 20 Scenarios

  • examples.mdx (EN + IT): scenario matrix expanded from 5 → 20 rows.
    Each of the 15 new entries covers a previously undocumented Z-code
    (z102, z103, z105, z108, z202, z204, z301, z302, z303, z402, z403,
    z501, z502, z503, z505) with expected exit code, engine, and prose.

Archive & Housekeeping

  • v0.8.x and v0.7.x changelogs split into changelogs/ archive files.
  • Developer command matrix cleaned of obsolete preflight terminology.

Checklist

  • just verify — exits 0
  • TypeScript typecheck — passes
  • ESLint — passes
  • Zenzic strict audit — zero findings
  • Z602 I18N_PARITY — EN/IT in sync
  • CHANGELOG.md promoted to [0.9.0] - 2026-05-31

PythonWoods-Dev and others added 30 commits May 9, 2026 20:10
docs(changelog): record ADR-013 addition in [Unreleased] (EN/IT).
Add 🔍 to Zenzic Sentinel (docs-portal audit) and rename Final Guard
to Zenzic-Doc Final Guard for cross-repo consistency.
…nce templates

- Fix release.yml softprops/action-gh-release @v2@V3
- Add secret-scan.yml, security-posture.yml
- Add PULL_REQUEST_TEMPLATE.md (accuracy, EN/IT parity, graceful degradation clause)
- Add ISSUE_TEMPLATE: bug_report.yml, feature_request.yml, gate-bypass-postmortem.md
Prose fixes:
- 'frictionless sentinel' → 'Frictionless credential scanning' (privacy-gate EN+IT)
- {#the-sentinels-filter} → {#integrity-filter} (structural-integrity EN+IT)
- 'Visual State Guardian' → 'UI State Manager' (architecture.mdx)
- 'SENTINEL:' CLI output → 'NOTICE:' (cli, engines, migrate-engines EN+IT)
- '#   sentinel:' YAML job → '#   zenzic-check:' (cli EN+IT)
- {#shield-behaviour} → {#credential-scanner-behaviour} (advanced-features EN+IT)
- '_category_.json is automatically shielded' → 'excluded from' (configuration)
- 'Sovereign Override (404 Shield)' → '(404 Suppression)' (sovereign-override)
- 'when Sentinel reports' → 'when Zenzic reports' (sovereign-override)
- 'The Siege' → 'Credential Scanner Live Demo' (first-audit EN+IT)
- #step-2-siege → #step-2-credential-scanner (index EN+IT)
- 'sentinel in your pipeline' → 'static analyzer' (exit_strategy)
- 'The sentinel exists to protect' → 'The analyzer exists' (exit_strategy)
- Saga VI chronicle links removed (exit_strategy, licensing, evolution_policy EN+IT)
- 'sentinel was blind' → 'validator was blind' (architecture-gaps)
- 'Sentinel in Action' → 'Zenzic in Action' (zenzic-style EN+IT)
- 'report Sentinel' → 'report Zenzic' (IT zenzic-style)

RELEASE.md: rewritten to lean 50-line standard (was 261 lines)
…s, scanner-how-it-works anchor, neutral Lucide icons, @site IT badge paths, fix blog dead links, fix phantom Z205 + release-codenames, Big-O prosa Phase 36, suppression_cap=49, no lazy suppressions (ADR-042/ADR-044)
…d bootstrap script (ADR-042 fleet alignment)
- docs/how-to/workflow-integration.mdx: track 'zenzic=={version}' pin
- i18n/it/.../workflow-integration.mdx: same for Italian locale
- Fixes gap identified in cross-repo version audit: live pinned-version
  tip block was not covered by bump automation
ADR-072 — Version-centric narrative debt eradication:
- blog/2026-05-07-log-v070-quartz.mdx: remove v0.7.0/Phase N labels, use functional headings
- blog/2026-05-10-v080-basalt-namespace-contract.mdx: remove v0.8.0/Phase 8 narrative anchors
- blog/2026-05-12-engineering-basalt-deep-dive.mdx: remove all v0.8.0/'current release' references
- blog/2026-04-29-tutorial-stop-broken-links.mdx: minor agnostic prose polish
- blog/tags.yml: tag metadata cleanup
- developers/explanation/architecture-gaps.mdx: remove Basalt/version narrative labels (EN+IT)
- developers/how-to/write-plugin.mdx: agnostic prose alignment
- docs/reference/suppression-policy.mdx: remove version-era Phase references (EN+IT)
- docs/tutorials/examples.mdx: Z108 entry + examples matrix polish (EN+IT)

ADR-073 — Phase→Pass/Step algorithmic terminology migration:
- docs/explanation/architecture.mdx: Link Validation Pipeline Phase→Pass (Pass 1/1.5/2/3)
- docs/explanation/privacy-gate.mdx: scalability table Phase→Pass
- docs/reference/checks.mdx: circular links Phase 1.5/2→Pass 1.5/2
- docs/reference/finding-codes.mdx: Z101/Z102 technical context Phase→Pass (EN+IT)
- docs/reference/engines.mdx: Pagination note 'Phase 2'→'future milestone'
- docs/reference/configuration-reference.mdx: heading 'Phase 2'→'Suppression CAP'
- docs/how-to/migrate-engines.mdx: migration playbook Phase 1-4→Step 1-4
- docs/explanation/mineral-path.mdx: update 'use version number'→'use agnostic prose' (EN+IT)

Z601 governance hardening:
- zenzic.toml: add Phase 0-9 to brand_obsolescence blocklist

Result: just verify → EXIT 0, 100/100, 0 Z601 findings
…n mineral-path (ADR-044)

docs/explanation/mineral-path.mdx (EN):
- L22: Quartz row: zenzic-ignore: Z601 → zenzic:ignore: Z601
- L23: Basalt row: zenzic-ignore: Z601 → zenzic:ignore: Z601
- L30: CHANGELOG example: zenzic-ignore: Z601 → zenzic:ignore: Z601

i18n/it/…/mineral-path.mdx (IT mirror — parità bilingue):
- L22/L23/L30: same normalization applied

Result: --audit now shows 8 warnings with canonical colon syntax;
zero behavioral change (suppression still active in normal mode)
…or isolation (ADR-044/075)

Reporting Levels — Semantic Audit Footer (ADR-075):
- New section in suppression-policy.mdx (EN + IT)
- Define four states: Clean State, Managed Debt, Extended Debt, Critical Debt
- Document footer examples and suppression_cap configuration
- Formalize the semantics of [MANAGED DEBT] and [EXTENDED DEBT] labels

One-Way Mirror Isolation (ADR-044 enforcement):
- ecosystem.mdx: Remove Structum references from description and ecosystem table
- discovery.mdx: Replace 'Artificial Intelligence agents' → 'specialized tools'
- the-zenzic-trinity.mdx: Neutralize Structum cartography reference
- finding-codes.mdx: Replace 'AI-generated content' → 'malicious content'
- engines.mdx: Replace 'Artificial Intelligence agents' → 'specialized tools'

Result:
- ✅ Parità bilingue confirmed (EN + IT mirror parity)
- ✅ Nuclear grep: ZERO violations (only User-Agent HTTP header remains)
- ✅ zenzic check all --strict: PASS with [EXTENDED DEBT] footer
PythonWoods-Dev and others added 28 commits May 29, 2026 18:54
…ml for configure-ci-cd.mdx

The regex entries already cover the exact format — having both caused bump-my-version
to fail on the second pass after the first entry had already replaced all occurrences.

DIA: Nessun Impatto
…ly on CI evidence

github.com, shields.io, contributor-covenant, twitter, facebook, zenzic.dev/developers
exclusions are disabled until CI actually fails on those URLs.

DIA: Nessun Impatto
…tion

- Rewrite add-badges.mdx (EN+IT): Dual-Badge Telemetry overview, CI badge
  setup, DQS stamp setup, Red Badge as local signal, Time-Traveling badges,
  CI/CD integration (fail-fast gate), CI/CD automation (contents:write,
  if:always(), conditional commit), multi-file stamping
- Fix @v1 atemporality: replace pythonwoods/zenzic-action@v1.1.0 → @v1
- Sharpen CI/CD Integration prose: "fail the pipeline" intent made explicit
- cli.mdx (EN+IT): replace --export-shields with --stamp; add inline badge
  stamping section with colour table and red-badge-as-local-signal note
- configuration-reference.mdx: add badge_stamp_files to [project_metadata]
- README.md: CI badge (zenzic-audit) replaces Audit badge; Score migrated
  from Gist endpoint to --stamp; badge_stamp_files = ["README.md"]
- CI workflow renamed to zenzic-audit; badge alt text normalised to
  alt="zenzic-audit" / alt="zenzic-score" (lowercase kebab)
…n add-badges guide

CI/CD Integration section now documents --check-stamp instead of the
git diff --exit-code approach. Notes that zenzic-action runs the check
automatically by default (opt-out: check-stamp: 'false'). EN+IT updated.
…d update release manifesto

ADR-015 documents the decision to validate DQS badge freshness natively
via --check-stamp, replacing the external git diff bash gate. Eliminates
the Zero-Config Default pillar violation introduced by manual CI scripts.
Blog post log-v080 updated: date corrected to 2026-05-30, Native
Telemetry Validation section added.
Updated brand-kit.mdx (EN+IT): links now point to /releases/latest
(valid URL) with the direct download path documented as inline code.
The clickable link validates cleanly; the direct URL activates
automatically on the next release when brand-kit.zip is attached.
brand-kit.zip is a GitHub Release asset, not a local git-tracked file.
The path ../../assets/brand/brand-kit.zip would never exist in a clone.
Replaced with ../../assets/brand/svg/zenzic-wordmark.svg (a real tracked
file) to keep the path-symmetry example correct and verifiable.
… wrangler-action v4.0.0

- actions/dependency-review-action v4 → v5.0.0 (ADR-089 SHA pin) (#52)
- cloudflare/wrangler-action v3 → v4.0.0 (ADR-089 SHA pin) (#58)
…mples gallery (20 scenarios)

- ZenzicOutput.tsx: fix BreachOutput Pick to include 'code' prop (TS2322)
- finding-codes.mdx EN/IT: Z204 banner → POLICY VIOLATION DETECTED
- privacy-gate.mdx EN/IT: [core] table header + Exit Behavior section
- examples.mdx EN/IT: 20-scenario matrix (5 → 20)
@PythonWoods-Dev PythonWoods-Dev merged commit df7998b into main May 31, 2026
8 checks passed
@PythonWoods-Dev PythonWoods-Dev deleted the release/v0.9.0 branch June 1, 2026 10:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant