v1.0.0

What's Changed

Other changes

• sync: land accumulated main stack (rule-pack 1.1.0→1.9.0, incremental scan, consumer security) by @anulum in #11
• test(fuzz): Atheris coverage-guided fuzzing for the record parsers by @anulum in #12
• feat: add VS Code evidence review by @anulum in #13
• feat: sync verified TODO controls by @anulum in #14
• ci: add metrics and branch-backed docs by @anulum in #16
• ci: publish coverage to Codecov by @anulum in #17
• ci: move setup-node to Node 24 runtime by @anulum in #18
• feat(cra): offline Article 14 preparation workflow (P0) by @anulum in #19
• feat(diff): content-addressed report comparison (G7) by @anulum in #20
• feat(verify): offline evidence verification (M3) by @anulum in #21
• chore(deps): consolidate dependency updates by @anulum in #30
• feat(cra): import SBOM and bridge OSV evidence by @anulum in #31
• feat(cra): add probation rules and signed pack by @anulum in #32
• feat(campaign): G8 real read-only cross-repository Git object capture by @anulum in #33
• feat(campaigns): execute captured historical trees by @anulum in #35
• docs(calibration): publish bounded 1.0 evidence by @anulum in #36
• feat(contract): freeze 1.0 compatibility surfaces by @anulum in #37
• feat(release): add fail-closed release-quorum certificate by @anulum in #38
• feat(release): add turnkey release-quorum seal driver by @anulum in #39
• docs(readme): add OpenSSF Best Practices badge by @anulum in #40
• chore(governance): add independent reviewer to CODEOWNERS by @anulum in #41
• chore(docs): scrub private workspace label from public documentation by @anulum in #43
• chore(release): release version 1.0.0 by @anulum in #44

Full Changelog: v0.1.1...v1.0.0

v0.1.1

Full Changelog: v0.1.0...v0.1.1

v0.1.0

What's Changed

Dependencies and operations

• build(deps): bump github/codeql-action/analyze from 4.36.3 to 4.37.0 by @dependabot[bot] in #2
• ci: bump actions/stale from 10.3.0 to 10.4.0 by @dependabot[bot] in #5
• build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 by @dependabot[bot] in #6
• build(deps): bump semgrep from 1.169.0 to 1.170.0 by @dependabot[bot] in #7
• build(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 by @dependabot[bot] in #3

Other changes

• feat: harden audit provenance and publish digest graph by @anulum in #8

New Contributors

• @dependabot[bot] made their first contribution in #2
• @anulum made their first contribution in #8

Full Changelog: https://github.com/anulum/rigor-foundry/commits/v0.1.0