art50-ci v0.2.0 — portable report schema

This release makes generated evidence portable and privacy-minimised.

Highlights:

• Audit reports and standalone provenance evidence now use schemaVersion: 2; configuration remains version: 1.
• Persisted local configPath, target, resolvedTarget, and finalUrl values use $CONFIG_DIR/... or $LOCAL_FILE instead of absolute host paths.
• screenshotPath and evidencePath are document-relative, so report bundles can move between local and CI environments.
• Diagnostic fields redact known and unknown absolute filesystem paths while runtime objects and CLI output paths remain absolute for local use.
• Query strings, fragments, and URL credentials remain redacted.
• Added cross-platform regression coverage for Windows, UNC, POSIX, file-URL, missing-file, aggregate-report, and direct-evidence cases.

Upgrade advisory:

• Regenerate reports created with v0.1.0 before sharing them. Existing public v0.1.0 artifacts may contain a host path or username and should be removed or replaced.
• JSON consumers should branch on schemaVersion and reject unknown versions.
• Two-argument writeReports() calls remain privacy-safe; pass { baseDirectory } for the most precise $CONFIG_DIR/... projection.

Install from this release:

npm install --save-dev https://github.com/Rubiss/art50-ci/releases/download/v0.2.0/art50-ci-0.2.0.tgz
npx playwright install chromium
npx art50-ci verify https://art50-ci.rubiss89.chatgpt.site --selector '[data-product-boundary]' --text 'No legal compliance verdicts.'

SHA-256 (art50-ci-0.2.0.tgz):
7726160cbe827eebe5c13b6fddfdecbeb841708c504ce2efb9ca38e8ab2b3457

art50-ci reports configured technical observations. It does not provide legal advice, certification, signer-trust verification, authenticity guarantees, or legal-compliance conclusions. See the changelog for compatibility details.