@agenttool/whitehack-scan@0.9.0

Whitehack 0.9.0 keeps the canonical 47-check CLI/API as an attention flashlight rather than a vulnerability verdict and adds the public-minimal evidence capsule.

The attached tarball is byte-identical to the checked-in LOVE artifact and the verified public npm package. The new pure transform removes target, locations, source text, scan scope, messages, and other caller text; retains only fixed scanner metadata plus canonical aggregate check/confidence/doctrine/principle/count groups; and exposes a bounded exact-byte parser. The separate capsule CLI scans locally and emits canonical bytes without uploading them.

Whitehack remains bounded text analysis, not proof of security or vulnerability. A capsule hash is a plaintext identity, not a confidentiality commitment; publishing it can equality-link scans and permit offline guessing of check/count patterns. The capsule transform does not upload, store, retrieve keys, connect a wallet, call RPC, simulate, sign, broadcast, authorize publication, or prove source provenance, consent, custody, freshness, or readiness. Earlier release roots remain immutable and historical.