v4.1.1

What's Changed

• Release 4.1.1 by @arena-ai-coding-agent[bot] in #4

Full Changelog: v4.1.0...v4.1.1

v4.1.0

HydraSight 4.1.0 — OBSIDIAN

AI-assisted offensive-security orchestration for authorized lab environments — now a one-line install:

pip install hydrasight==4.1.0

Highlights

• 🔐 Mandatory authorization attestation (authorize <cidr> → I AUTHORIZE, or a pre-signed hydrasight.authorization.json) enforced at the dispatch chokepoint alongside ROE — deny by default
• 🧾 Tamper-evident audit trail — SHA-256 hash-chained JSONL of every proposed/allowed/blocked command, with AuditLogger.verify() and secret redaction
• 📦 Real packaging: single-sourced version, sdist+wheel, Docker + docker-compose (Kali MCP backend), Makefile, MkDocs Material docs (--strict)
• 🚀 Tokenless release pipeline: PyPI publish via OIDC trusted publishing (auto-created the hydrasight project) + this release, on v* tags — see RELEASING.md
• 🧪 Quality gates: 797 tests, 75.75% branch coverage (CI floors at 75%), ruff, pylint 9.18, mypy strict contracts
• ♻️ Architecture: post_access package refactor (shadowed legacy module removed pre-tag), core/hash_crack, reporting/outcome, narrowed exception boundaries

Verify (sha256)

5fe1e3bb0f027457a845700ac66c22191bda12fa476355dc32c6bfa08e6f1d51 hydrasight-4.1.0-py3-none-any.whl
6a96d48742e8224cf38584f5d1cc0f11d092ecc087a4602c9c01177cb086e079 hydrasight-4.1.0.tar.gz

What's Changed

• #1 chore: fix CI gates, refactor dispatcher, harden post-exploit, sync docs
• #2 Release 4.1.0: authorization gate, tamper-evident audit, packaging, docs, hardening
• #3 Fix PyPI trusted publishing failure in release workflow

Full Changelog: v4.0.0...v4.1.0