2026.8.3

What's Changed

• fix(cli): search/list show only latest version per name by @marccampbell in #83
• fix(cli): hide retired adversarylabs/library paths from search by @marccampbell in #84
• feat: push README/CHECKS as catalog OCI referrers by @marccampbell in #85
• fix: sanitized CLI usage reporting and pull metrics by @marccampbell in #86
• fix: trust official catalog domains for host execution by @marccampbell in #87
• feat(cli): list status installed/catalog/outdated by @marccampbell in #91
• feat(cli): remove local adversaries by name or --all by @marccampbell in #92
• fix: trust web/* catalog domain for host execution by @marccampbell in #89
• chore(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 in the go-dependencies group by @dependabot[bot] in #88
• fix: trust factory/* catalog domain by @marccampbell in #90
• feat(cli): official Ed25519 signatures for host-execution trust by @marccampbell in #94
• feat(cli): add sign-official command and make sign-dev by @marccampbell in #95
• fix(cli): untrusted adversary messaging and TTY confirm by @marccampbell in #96
• feat: local repository index for adversary navigation by @marccampbell in #97
• fix(repository): ignore leftover writeAtomic temps in journals by @marccampbell in #98
• fix(cli): send production credentials for official catalog pulls by @marccampbell in #100
• fix(cli): collapse flat↔domain packages in automatic selection by @marccampbell in #99

Full Changelog: 2026.7.30...2026.8.3