v0.2.17

What's Changed

• chore: bootstrap repo (pyproject, uv lockfile, Python 3.14, MIT license) by @constk in #29
• chore: ruff + mypy strict + import-linter + commitizen config by @constk in #30
• chore: .gitignore, .editorconfig, .dockerignore by @constk in #31
• chore: pre-commit hook stack (ruff, gitleaks, commitizen, mypy, hygiene) by @constk in #32
• chore: justfile recipes (lint, typecheck, test, architecture, check, frontend-check) by @constk in #33
• chore: Dockerfile (multi-stage, Python 3.14, non-root, healthcheck) by @constk in #34
• chore: docker-compose.yml (app + frontend + jaeger) by @constk in #35
• chore: GitHub issue + PR templates + CODEOWNERS by @constk in #36
• chore: .claude hooks (pretooluse_bash, posttooluse_writeedit, sessionstart) + settings.local.json.example by @constk in #37
• chore: port portable .claude/skills by @constk in #38
• chore: CI workflow (lint, typecheck, tests, coverage >=75%, architecture) by @constk in #39
• fix: dereference astral-sh/setup-uv annotated tag to commit SHA by @constk in #40
• fix: simplify ci.yml to clear workflow startup error by @constk in #41
• chore: bare-minimum ci.yml to isolate startup failure by @constk in #42
• chore: ci.yml with lint job + setup-uv v8 by @constk in #43
• chore: restore full ci.yml with setup-uv v8 (fixes startup failure) by @constk in #44
• chore: drop frontend CI jobs until #21 lands the scaffold by @constk in #45
• chore: placeholder test so pytest does not exit 5 on empty scaffold by @constk in #46
• chore: CI meta-gates (branch-protection contexts sync, commit-types sync) by @constk in #47
• chore: security workflow (gitleaks, pip-audit, npm audit, trivy) by @constk in #48
• fix: update trivy-action SHA by @constk in #49
• chore: drop npm-audit job until #21 lands frontend by @constk in #50
• fix: ignore pip CVE-2026-3219 by @constk in #51
• chore: PR title lint + release-drafter by @constk in #52
• chore: release workflow (tag-triggered, SBOM, GH Release publish) by @constk in #53
• chore: branch-protection JSON + apply workflow + artifact cleanup + CodeQL by @constk in #54
• feat: backend scaffold + Pydantic StrictModel + example schemas (#17, #18) by @constk in #55
• feat: observability setup (OTel SDK, OTLP exporter, structured logging, span helpers) by @constk in #56
• feat: tool-registry pattern + example echo_tool by @constk in #57
• feat: frontend scaffold (Vite + React 19.2 + TS strict, eslint flat + prettier + vitest) by @constk in #58
• feat: SSE client + hello page + CSS palette + component test (#22, #23) by @constk in #59
• feat: eval harness scaffold + 1 example golden case + nightly workflow_dispatch by @constk in #60
• docs: HARNESS / INVARIANTS / BOUNDARIES / DEVELOPMENT / EVAL_HARNESS / SECURITY / ARCHITECTURE + README + CONTRIBUTING + CLAUDE + CHANGELOG + TASKS (#25, #26) by @constk in #61
• chore: scrub remaining Teller / financial / DuckDB references by @constk in #62
• docs: README badges + screenshot section by @constk in #63
• release: bring main up to develop (every harness ticket) by @constk in #64
• fix: proxy /api/* from Vite dev server to the backend by @constk in #65
• docs: land CI-green + hello-page screenshots; trim Jaeger placeholder by @constk in #66
• release: sync main with develop (Vite proxy fix + README screenshots) by @constk in #67
• chore: container hardening — read-only root FS + tmpfs /tmp + Python env by @constk in #68
• chore: file/function length caps — ruff PLR0915/PLR0912 + check_file_length.py by @constk in #69
• chore: three CI gates — version bump, action pinning, tests required by @constk in #70
• chore: src/ README audit gate + 5 package READMEs by @constk in #71
• chore: aspirational-ticket gate + INVARIANTS marker convention by @constk in #72
• chore: subject-case sync extension — commitizen + pr-title by @constk in #73
• chore: post-release CHANGELOG rollup automation by @constk in #74
• test: route-versioning audit + OTel semconv backstop tests by @constk in #75
• docs: HARNESS_PRIMER + INVARIANTS marker for route-versioning enforcement by @constk in #76
• release: bring main up to develop (Teller v1.4 → v1.10.3 backport) by @constk in #77
• feat: pin-freshness audit + composite-action coverage by @constk in #78
• feat: pre-stage CHANGELOG before release-PR workflow by @constk in #79
• docs: clarify required-context count + document solo-owner admin-merge policy by @constk in #80
• release: bring main up to develop (Teller v1.12.0 backports + audit follow-up) by @constk in #81
• fix: pin-freshness audit normalises sub-path actions; bump setup-uv comment + codeql v4 by @constk in #83
• chore: add optional Beads issue queue guidance by @jakelindsay87 in #86
• fix: bump idna + starlette to patched versions by @constk in #103
• feat: eval pattern examples calling Azure OpenAI by @constk in #104
• chore: align develop with main — backport #86 content + version by @constk in #106
• docs: mark admin-merge policy as transitional solo-owner state by @constk in #101
• docs: reframe README opener around the human+agent audience by @constk in #99
• docs: add concrete agent-failure example to README by @constk in #100
• docs: replace Jaeger screenshot TODO with section scaffold by @constk in #105
• release: bring main up to develop (0.2.17 — release-readiness docs + eval pattern examples + transitive CVE patches) by @constk in #108

New Contributors

• @constk made their first contribution in #29
• @jakelindsay87 made their first contribution in #86

Full Changelog: https://github.com/constk/harness-python-react/commits/v0.2.17