v0.5.3

0.5.3 (2026-09-16)

Features

• rules: add SG-EXE-010 — host security control disabled (AST01) (#300) (fb5cea8), closes #298
• rules: add SG-INJ-012 — falsified completion report (AST01) (#291) (f859c73), closes #288
• rules: add SG-INJ-013 — structural concealment by padding (AST01/AST04) (#310) (01b236e), closes #308

Bug Fixes

• cmd: reject a --ttl-days that makes an attestation born expired (#301) (f2ed805)
• eval: repair the skillsmp fetcher, which had been returning zero bundles (#304) (3992a78)
• policy: reject the two policy misconfigurations that still failed silently (#292) (be9f51a)
• rules: SG-AS-001 stops at command boundaries and at installs (#297) (12b7efa), closes #294
• rules: SG-EXE-003 detects privilege grants, not privileged commands (#287) (e38b4a7)
• rules: SG-INJ-002's comment leaf needs whole words (closes #277) (#281) (45df97b)
• rules: the documentary penalty no longer reads a leaf's own text as context (closes #143) (#283) (8ba1f1b)
• verify: a co-signature must not mask a revoked key (#311) (16700e7)