v0.1.1

variant-confidence v0.1.1

Maintenance release: adds ESM-1v/EVE score integration (T14) plus always-on
GitHub Actions CI, without changing the existing AlphaMissense calibration
behaviour. Backwards compatible.

Verified in clean clone (no network):

• ruff check . → All checks passed!
• pytest tests/ → 38 passed
• GitHub Actions: green on Python 3.11 / 3.12, 0 Code Scanning alerts

Added

• ESM-1v / EVE integration (T14): variant_confidence/data/esm_eve.py loads
  user-converted (chrom,pos,ref,alt,score) TSVs for ESM-1v (MIT, Meta) and EVE
  (MIT, Pascal Notin). join_scores returns NaN (never 0) for unmatched, same
  pattern as AlphaMissense. integrate.align_scores_esm_eve wires it to the
  pipeline; weights are NEVER committed (Opción A). Licenses verified 2026-07-18.
• CLI wiring (T14g): variant-confidence --source {synthetic,alphamissense,esm1v,eve} with --score-path selects the score
  source end-to-end. Reuses align_scores / align_scores_esm_eve; fail/degrade
  stays centralized in run_calibration (AC12); the report declares source=
  and a missing score is never imputed as 0. +8 tests.
• CI (github-actions-sonarcloud): .github/workflows/ci.yml (ruff +
  pytest+cov on py3.11/3.12, bandit→SARIF to Code Scanning, SonarCloud gated on
  SONAR_TOKEN). sonar-project.properties, scripts/bandit2sarif.py.

Fixed

• T13b commit message said "9 new tests" — the diff added 2 (suite 26 → 28);
  corrected in CHANGELOG (v0.1.0 entry).
• AC13b coverage figure (19.118 proteins) marked as NOT independently audited.

Known issues

• AlphaMissense license ambiguity (CC BY 4.0 vs CC BY-NC-SA 4.0) remains
  unresolved — treat the data as restricted until clarified.
• The live AlphaMissense / ESM-1v / EVE join is exercised by an offline fixture,
  not a live download in CI (weights/predictions are never committed).