v0.10.2

OSQAr verified release inventory

• Manifest schema: osqar.release-manifest.v1
• Release version: v0.10.2
• Source revision: 4003c4041d7cb273bec78d95fb8980b2d0bb013f
• Artifact count: 18

Downloadable artifacts

• OSQAR-RELEASE-PREMANIFEST.json — SHA-256 9450d3cb684b4c9db4c87ff0d4cfe50e856085b3046500a0df8cc14f4980e0fd
• OSQAR-RELEASE-PREMANIFEST.sigstore.json — SHA-256 99dce21f035a752ec5c89fa58059c3bd68540306cb035280042dde827bcf83c5
• SHA256SUMS — SHA-256 c44b6c29964361c05465e3426a3450a6b71381a835f6468ab34e2cace561568f
• osqar-0.10.2-py3-none-any.whl — SHA-256 582e7e512ea6db46885e42535c2c37fc205dda710ea50fc67807dede22525fb7
• osqar-0.10.2.tar.gz — SHA-256 d26423cd284fb9297fdf2c1e4bb7efce214c89557e1f49c8c78337419e7bed8b
• osqar_c_hello_world_shipment.zip — SHA-256 a30368545eae823579c9cbc78873589651ecd06cc7b288e2d90541310861d2fc
• osqar_c_hello_world_shipment.zip.sha256 — SHA-256 351cf2e50edf9439968774785c0aad42aad1476f4f16ca9cd2b60fe61e682d2b
• osqar_c_shared_lib_shipment.zip — SHA-256 d38e55104e95d2706d7b1414c018f44bf8f9107c2d5596b2903600a625d9caf7
• osqar_c_shared_lib_shipment.zip.sha256 — SHA-256 71140b35a59bbddb9f7ecbdb9b0f357d62f3dcbdf72d71a89d2d11fc77badf6d
• osqar_cpp_hello_world_shipment.zip — SHA-256 5434367663b8ee1b6cf33749001e668dc4a7a6f91fb44a185f5956b2f43d149e
• osqar_cpp_hello_world_shipment.zip.sha256 — SHA-256 a9f0963dc62619b246c76cc90adf3e52428f86d350ce012d0a6c1c8499600010
• osqar_example_workspace_v0.10.2.zip — SHA-256 4725ef9467128dda9eb5a770c48e533de81560c02028b6c28222960103b542c3
• osqar_example_workspace_v0.10.2.zip.sha256 — SHA-256 33bcf0945a2edb330a9049703f0b29116b4dbd40ba516dc7bde587338d6661cd
• osqar_framework_bundle_v0.10.2.zip — SHA-256 7287b56608d953983b03dcc8cafe3e5f0318384742e4dae720df9338289ed6f7
• osqar_framework_bundle_v0.10.2.zip.sha256 — SHA-256 dd43077cf5f724e71d838e80a2b62dafae6e33d74f6fb326e219f4664e1b8d3e
• osqar_rust_hello_world_shipment.zip — SHA-256 ccea2cbcaeb53b25097d0150e63f11144d1addf631b13aa56a18796be446211f
• osqar_rust_hello_world_shipment.zip.sha256 — SHA-256 0d6b01b4f6496bccfbbbd6178c3f59c662523446032901f4546929519bb54e01
• release-attestation.intoto.jsonl — SHA-256 9822bcea11da34a960fe0ba1089421def242330ca0661c4e6a705beb95851139

This description is generated from the release manifest. Verification
establishes inventory closure and integrity, not semantic adequacy or safety.

v0.10.1

OSQAr verified release inventory

• Manifest schema: osqar.release-manifest.v1
• Release version: v0.10.1
• Source revision: c4d8b5e9fd2a1c3cdbcf21b1a65a8ae9e4e4d189
• Artifact count: 18

Downloadable artifacts

• OSQAR-RELEASE-PREMANIFEST.json — SHA-256 c06d42552dc92985569201916e04b203b26a57b1e8f7630fd7d317f992f5b5f1
• OSQAR-RELEASE-PREMANIFEST.sigstore.json — SHA-256 64f8a397817fc6843beb2b130275b30374089a6c7a7a4dba4012e76115811313
• SHA256SUMS — SHA-256 7c19fffed9d9784f6f5726ae1f16acbafa2c78003a651f3c7432d01c1b85a84c
• osqar-0.10.1-py3-none-any.whl — SHA-256 1430680a36165bae7d4b81f812e3bc039067d14c1e3186836ca5e40bd47a0c61
• osqar-0.10.1.tar.gz — SHA-256 f7554c851f1eb0365350fa8cdde7e2e02da217a60e04fad365c0d72e9b3258a9
• osqar_c_hello_world_shipment.zip — SHA-256 d206a0a560de3f1012bdd00869ab800b600430ef444834e162c47b90a8d0cb68
• osqar_c_hello_world_shipment.zip.sha256 — SHA-256 639a9561115ad6b4bab4741866a9c979e2a9183f040f264605f6ab2804a894e0
• osqar_c_shared_lib_shipment.zip — SHA-256 a67f33cd902b87f7396798deb440338f617512adb9a811aa35357ad8303b8e97
• osqar_c_shared_lib_shipment.zip.sha256 — SHA-256 46f7c6f022777188301bf8d151a249cdd7c937a8d550425f1d2801a9a293284e
• osqar_cpp_hello_world_shipment.zip — SHA-256 44c4189eba204e607d57ce2e0ba43e835e6009d29e6359ec65cd67e42e92d6a6
• osqar_cpp_hello_world_shipment.zip.sha256 — SHA-256 677dfbc0dd5a4d1c5bb174be390003a43590b0c03ad853e6e8f0904fe9cbd07c
• osqar_example_workspace_v0.10.1.zip — SHA-256 925bb120050dade2e6195bfe5b8cc822bc45bfe869250e0a8588645c64cc20bf
• osqar_example_workspace_v0.10.1.zip.sha256 — SHA-256 60c0fa1cc43597d76319cbd7b3303bcff22f99b19594d9e422f9a02ef201380a
• osqar_framework_bundle_v0.10.1.zip — SHA-256 f75bab6f35223110e4bcdaf6d91d0e39d2f7f4d8b980e31f8943f70b92f83f44
• osqar_framework_bundle_v0.10.1.zip.sha256 — SHA-256 35ecda17bfca75fb9220b7e6376451bb3e93c6db168b46227c2fd22d8140bf5c
• osqar_rust_hello_world_shipment.zip — SHA-256 a806c4bd4a22eb10b0ef98612800e87733bfa4c1663a079159e9b9425e056e8f
• osqar_rust_hello_world_shipment.zip.sha256 — SHA-256 386720f34f0ba8be9a1a2fb857814c047486ab0aefd22b2ee98b4ddbed2796df
• release-attestation.intoto.jsonl — SHA-256 8c39f609287cfb0c958908039c3c197328a7ac1ca292e967eb5be7bdadc29815

This description is generated from the release manifest. Verification
establishes inventory closure and integrity, not semantic adequacy or safety.

v0.10.0

What's Changed

• Implement fail-closed evidence acceptance by @BitVortex in #28
• Define fail-closed tool reliance boundary by @BitVortex in #29
• test: strengthen framework evidence failure handling by @BitVortex in #30
• Add standards-neutral claim showcase and ISO reference catalog by @BitVortex in #31

Full Changelog: v0.9.0...v0.10.0

v0.9.0

Full Changelog: v0.8.1...v0.9.0

v0.8.1

What's Changed

• feat: add PlantUML backend to gsn generate (#20) by @BitVortex in #21

Full Changelog: v0.8.0...v0.8.1

v0.8.0

New features

• XLSX traceability export — osqar traceability --format xlsx
• Incremental shipment — ship only new/changed evidence
• Workspace combine — merge multiple project workspaces
• GPG signing for evidence shipments
• GSN (Goal Structuring Notation) support

Documentation overhaul

• Getting Started guide, role-based guides, professional deployment section
• Complete CLI reference, CI integration guide with OSQAr-cJSON
• Docs restructured for quick overview + in-depth guidance

Fixes

• _load_needs handles workspace-combined dict format
• openpyxl properly integrated in pyproject.toml
• poetry.lock sync
• ASIL D claims toned down — qualification attempt, not achieved compliance

Full Changelog: v0.7.3...v0.8.0

v0.7.3

Full Changelog: v0.7.2...v0.7.3

v0.7.2

Full Changelog: v0.7.1...v0.7.2

v0.7.1

Full Changelog: v0.7.0...v0.7.1

v0.7.0

What's Changed

• feat: improve PyPI template robustness (#6) by @BitVortex in #7
• feat: add --external-source flag for third-party source exemption (#5) by @BitVortex in #8
• feat: auto-generate gap documentation from osqar_project.json (#4) by @BitVortex in #9
• feat: add configurable verification activity runner to shipment prepare (#3) by @BitVortex in #10
• feat: support PlantUML-free build mode via OSQAR_NO_DIAGRAMS (#2) by @BitVortex in #11
• feat: pass through traceability prefix overrides to all CLI wrappers (#1) by @BitVortex in #12

New Contributors

• @BitVortex made their first contribution in #7

Full Changelog: v0.6.0...v0.7.0