Skip to content

DocFence 0.11.0

Choose a tag to compare

@SybilGambleyyu SybilGambleyyu released this 01 Aug 08:13

Office sensitivity-label metadata is now review-visible

DocFence 0.11.0 adds a dedicated, privacy-safe inventory for Microsoft Purview
sensitivity-label metadata retained in Word documents and templates.

  • Detects Office 2021 LabelInfo parts through standard classification-label
    relationships, the SDK content type, and canonical docMetadata/LabelInfo
    paths.
  • Detects legacy MIP metadata in custom document properties, including
    MSIP_Label_<GUID>_<attribute>, the Sensitivity property, and documented
    Word content-marking properties.
  • Adds DFP035 to require a clean handoff and DFP036 to protect an approved
    label-metadata baseline.
  • Reports aggregate counts only. Label and tenant IDs, names, dates, action
    IDs, extension data, MIP attributes, marking strings, paths, and fingerprints
    remain private.

Recognized classification-label relationships must be package-root scoped,
internal, and resolvable. LabelInfo roots and label state are validated; malformed
recognized metadata fails closed. Same-count metadata changes remain visible in
a private comparison, while relationship-ID renumbering alone remains quiet.

The release passed the full regression suite, Ruff, Python 3.11/3.13 CI, twice
reproducible source and wheel builds, and an installed-wheel profile smoke test.
See the policy reference and threat model in the tagged source for the complete
scope and runtime limits.