DocFence 0.11.0
Office sensitivity-label metadata is now review-visible
DocFence 0.11.0 adds a dedicated, privacy-safe inventory for Microsoft Purview
sensitivity-label metadata retained in Word documents and templates.
- Detects Office 2021
LabelInfoparts through standard classification-label
relationships, the SDK content type, and canonicaldocMetadata/LabelInfo
paths. - Detects legacy MIP metadata in custom document properties, including
MSIP_Label_<GUID>_<attribute>, theSensitivityproperty, and documented
Word content-marking properties. - Adds
DFP035to require a clean handoff andDFP036to protect an approved
label-metadata baseline. - Reports aggregate counts only. Label and tenant IDs, names, dates, action
IDs, extension data, MIP attributes, marking strings, paths, and fingerprints
remain private.
Recognized classification-label relationships must be package-root scoped,
internal, and resolvable. LabelInfo roots and label state are validated; malformed
recognized metadata fails closed. Same-count metadata changes remain visible in
a private comparison, while relationship-ID renumbering alone remains quiet.
The release passed the full regression suite, Ruff, Python 3.11/3.13 CI, twice
reproducible source and wheel builds, and an installed-wheel profile smoke test.
See the policy reference and threat model in the tagged source for the complete
scope and runtime limits.