v0.4.0

Three new detectors, none rule-dependent

• Same-version binary repacks where the metrics move but the version doesn't.
• Encoded single-line payloads newly wired into a package entrypoint.
• Readable implants grafted in, caught by timestamp outliers rather than obfuscation.

Sharper judgment

• Reads versions from artifact metadata; without one, every release-pressure check was silently off.
• --deps findings now change the verdict instead of just printing.
• Dependency ranges resolve to current, not their floor — pinning to the floor is how you miss event-stream.

Fixes

• isomer ci --deps silently skipped both dependency folding and LLM interpretation.
• --offline didn't actually suppress the LLM.
• An unreadable base file could fabricate the signal that lowers a verdict.
• CI hardening: a caller-supplied --base could forge GitHub workflow outputs.
• Rules now auto-update like scan does.

Output

• Versioned features block in JSON for ML consumers.
• Trait grid ranked by criticality × confidence, capped at 24.
• Terminal row caps no longer truncate the data the verdict is computed from.