v1.0.0

What's Changed

• chore(proto): sync generated bindings with arcjet monorepo main by @qw-in in #30
• feat(sensitiveinfo): pluggable detection backend and on-device NER (rampart) by @davidmytton in #29
• deps: update actions/checkout action to v6.1.0 by @renovate[bot] in #32
• deps: update jdx/mise-action action to v4.2.1 by @renovate[bot] in #34
• deps: update step-security/harden-runner action to v2.20.0 by @renovate[bot] in #35
• deps: update actions/checkout action to v7 by @renovate[bot] in #36
• deps: update actions/setup-go action to v7 by @renovate[bot] in #37
• feat: expand metadata to nested JSON on Guard and Protect by @qw-in in #31
• chore(proto): sync vendored bindings with arcjet monorepo main by @qw-in in #38
• fix: regenerate redact and jsreq WebAssembly modules by @davidmytton in #39
• fix: classify phone numbers with Rampart model by @davidmytton in #40
• feat: expose threat and billing metadata by @davidmytton in #42
• fix: remove background noise field by @davidmytton in #43
• feat: add remote Guard policies by @davidmytton in #41
• feat(guard): graduate GuardModerateContent by @davidmytton in #45
• feat(guard): add Capture on GuardClient by @davidmytton in #46
• deps: update step-security/harden-runner action to v2.20.1 by @renovate[bot] in #49
• feat: sync well-known bots and regenerate the jsreq WebAssembly module by @davidmytton in #52
• fix: return a usable ERROR decision when Protect transport fails by @davidmytton in #58
• fix(guard): require Mode instead of defaulting to DRY_RUN by @davidmytton in #57
• docs(redact): drop incorrect claim that Python has arcjet.redact by @davidmytton in #54
• docs(guard): document ARCJET_KEY env fallback as intentional by @davidmytton in #55
• feat: add ContextWindowSize to HTTP SensitiveInfo rules by @davidmytton in #61
• fix: evaluate local Protect rules in JS priority order by @davidmytton in #59
• test: drive Protect entry point on transport failure by @davidmytton in #62
• test(guard): assert ModeLive still succeeds for every constructor by @davidmytton in #63
• fix(guard): use typed default rate-limit bucket names by @davidmytton in #56
• fix: apply a default Protect deadline when the context has none by @davidmytton in #60
• deps: update jdx/mise-action action to v4.2.5 by @renovate[bot] in #47
• chore: prepare Go SDK 1.0.0 release by @qw-in in #64
• docs: clarify client IP header trust by @davidmytton in #66
• docs: move client IP warning under installation by @davidmytton in #67
• feat: expose client IP provenance and diagnostics by @davidmytton in #68
• deps: update module golang.org/x/text to v0.41.0 by @davidmytton in #69
• feat(guard): surface a policy expression rule result by @davidmytton in #70
• fix: repair the nethttp example and lint the example modules by @arcjet-rei in #72
• feat: add agent guard helpers and Microsoft Agent Framework support by @arcjet-rei in #73
• fix: accept an underscore in a guard label by @arcjet-rei in #74
• fix: clean the lint baseline and lint the whole tree by @arcjet-rei in #75
• test: hold ValidateGuardLabel to the shared guard label cases by @arcjet-rei in #76
• ci: automate Go release tags by @qw-in in #65
• docs: state why the shared label cases exist, rather than linking an ADR by @arcjet-rei in #77
• ci: tag agentframework from the release workflow by @arcjet-rei in #78
• chore: prepare Go SDK 1.0.0-rc.3 and agentframework 0.1.0-rc.1 release by @arcjet-rei in #79
• ci: verify the module proxy after the push, not during the release by @arcjet-rei in #80

Full Changelog: v0.1.0...v1.0.0