v2.8.0 — DLP test-file generator

Minor release

Added

• airs runtime dlp-gen — generate DLP test corpora: clean carrier files plus "dirty" copies with synthetic sensitive data embedded across PDF, PNG, JPEG, SVG, DOCX via 15 techniques (metadata, hidden text, container trailers, PNG chunks, LSB steganography, EXIF/COM, DOCX core-props/hidden-run). Writes clean/, dirty/, and a manifest.json mapping each dirty file to its technique + embedded values for scanner scoring. Randomized synthetic payloads (reserved-range SSNs, Luhn-valid test PANs, example.com emails, AWS …EXAMPLE keys); --seed for reproducibility. No real PII.
• dlp-test-files skill — drives the command.
• Docs: new Runtime page, full-CLI-sweep + command-reference entries, AGENTS.md.

Changeset: 0018.