v0.6.0

What's Changed

• fix(deps): bump idna to 3.15 — GHSA-65pc-fj4g-8rjx by @aevum-labs in #106
• Update self-governance pipeline status to reflect Phase 1 completion by @aevum-labs in #107
• feat(phase-g): Investigation Gate — enhancements audit + baseline artifacts by @aevum-labs in #108
• docs(threat-model): G-13 — classification ceiling is query-time only by @aevum-labs in #109
• feat(trust): Phase D trust infrastructure — Rekor v2, threat model, barriers by @aevum-labs in #110
• feat(trust): Phase D — Rekor v2, threat model extensions, barrier verification by @aevum-labs in #111
• fix(docs): replace out-of-tree THREAT_MODEL.md links with GitHub URLs by @aevum-labs in #112
• fix(ci): replace broken uv audit with uv run pip-audit by @aevum-labs in #113
• feat(sigchain): Phase C — key_scheme field, key rotation docs, VaultTransitSigner status by @aevum-labs in #114
• feat(dx): Phase B — AEVUM_DEV=1, OTelBridge, VaultTransitSigner, v0.6.0 by @aevum-labs in #115
• feat(spec): Phase E — conformance extension, Article 12 mapping, policy spec by @aevum-labs in #116
• feat(maintenance): Phase M — structured HITL, Article 14 oversight fields, standing rules by @aevum-labs in #117
• docs: Phase DOC — v0.6.0 documentation and nav coverage by @aevum-labs in #118
• docs: Phase DOC — v0.6.0 documentation and nav coverage by @aevum-labs in #119
• ci: fix pip-audit failing on workspace packages by @aevum-labs in #120
• ci: strip file:// path deps from pip-audit requirements by @aevum-labs in #121
• ci: fix pip-audit filter and bump starlette to 1.0.1 by @aevum-labs in #122
• ci: add continue-on-error to Scorecard publish step by @aevum-labs in #123
• feat(ux): Phase UX — demo deployment, web presence, accessibility, sustainability by @aevum-labs in #124
• fix(ci): resolve demo dependency conflict in deploy-demo.yml by @aevum-labs in #125
• fix(ci): add workflow_dispatch to deploy-demo.yml by @aevum-labs in #126
• chore(demo): add header comment to requirements.txt by @aevum-labs in #127
• fix(ci): sync Chrome and ChromeDriver before axe audit by @aevum-labs in #128
• chore(demo): update playground URL to demo.aevum.build by @aevum-labs in #129
• fix(demo): wrap landing page body content in <main> landmark by @aevum-labs in #130
• docs: v0.6.0 Phase F Part 2 — v0.7.0 handoff preparation by @aevum-labs in #131
• v0.6.0 Phase F cleanup: promote changelog, merge S-16, stub private docs by @aevum-labs in #132
• chore: v0.6.0 pre-release polish by @aevum-labs in #134
• fix(release): add PyPI registration pre-flight check before publish by @aevum-labs in #135
• fix(release): pre-flight check warns on 404 instead of blocking by @aevum-labs in #136

Full Changelog: v0.5.0...v0.6.0