DocFence 0.1.0
First public release of DocFence, a local-first DOCX/DOCM change-assurance CLI.
Highlights:
- Bounded OOXML package inspection with ZIP and XML safety limits.
- Private semantic fingerprints for body, headers, footers, notes, comments, and glossary stories.
- Privacy-safe JSON, Markdown, and SARIF reports that omit document material and package targets.
- Readable policy gates for revisions, comments, hidden text, relationships, macros, custom XML, settings, and opaque payload changes.
Validation:
- Regression coverage for redaction, story discovery, volatile Word metadata, policy status, and unsafe input.
- Lint, source/wheel build, metadata validation, dependency check, and clean wheel install passed locally.
See README, docs/policy.md, docs/threat-model.md, and docs/validation.md in the tagged source for the exact boundaries.