DocFence 0.21.0
DocFence 0.21.0 adds a privacy-safe inventory for direct DrawingML linked-picture markers (a:blip r:link) in supported Word stories.
- Adds the
word_drawing_linked_picturesprofile inventory and change signal. - Adds
DFP055(require no linked pictures) andDFP056(protect an approved linked-picture baseline). - Separates direct linked-picture markers from generic external relationships,
r:embed-only images, hyperlink fields, direct Word hyperlinks, and DrawingML hyperlink actions. - Reports only aggregate marker/story and backing image-relationship classification counts; image targets, relationship IDs, surrounding drawing markup, and story paths remain private.
- Does not retrieve, resolve, update, render, or claim a Word client will load a linked image.
Validation: 47 tests; lint; hosted Python 3.11 and 3.13 CI for the release commit and tag; reproducible wheel/source builds; package checks; and an isolated-wheel smoke profile of a pinned public linked-picture DOCX.
See the tagged policy reference, threat model, and validation notes for the exact boundary.