v0.3.0

Changelog

• 266f5ee chore(deps): bump actions/attest-build-provenance from 3.0.0 to 4.2.2 (#108)
• a834b27 chore(deps): bump astro in /site in the site-npm group (#107)
• 070dd05 chore(deps): bump sigstore/cosign-installer from 3.9.1 to 4.1.2 (#109)
• 3f6f2f9 fix(site): strip AI-slop copy tells from the homepage (#111)
• 99e8a01 ✅ test(fuzz): add fuzz targets for the untrusted-input parsers (#106)
• 69c3673 ✨ feat(api): expose the lexical gate on /api/v1/search (#81)
• ac8a7a5 ✨ feat(api): make okfctl-api v0.2-aware — status, epistemic, generated.at (#62)
• 15dee07 ✨ feat(api): serve GET /api/v1/search off a resident index (#69)
• 611fe9f ✨ feat(ci): gate the site build and add supply-chain scanning (#96)
• d7a8a0b ✨ feat(eval): add a TACA-style trustworthiness eval pass for KB nodes (#92)
• dc5e901 ✨ feat(okf): make validate/lint/analyze OKF v0.2-aware (#60)
• a714cb4 ✨ feat(release): one-line install, brew tap, signed cross-platform artifacts (#97)
• e63969b ✨ feat(search): add --lexical-gate to okfctl-search, preserving lexical recall (#70)
• 268f963 ✨ feat(search): repeatable scope filters and negating --not-path/--not-type/--not-tag (#68)
• 989a78b ✨ feat(site): add social card, favicon, robots.txt, llms.txt and 404 page (#95)
• 8f52da2 ✨ feat(site): credit the author in the footer, site-wide (#112)
• 5d11e89 ✨ feat(site): scaffold the okfctl.dev Astro site and its Pages pipeline (#87)
• 103f3ea ✨ feat(site): ship the bespoke okfctl.dev design through the theming seam (#98)
• efee75c 🐛 fix(analyze): prefer verified[].at as the freshness basis (#110)
• 21a078d 🐛 fix(api): accept lexical_gate as a /api/v1/search param (#83)
• 78ae7c3 🐛 fix(api): apply the recency decay floor in /api/v1/search (#74) (#76)
• 9462e7d 🐛 fix(api): reject unknown /api/v1/search params and alias separators (#80)
• 73c4004 🐛 fix(release): use cosign bundle format so signing can publish (#113)
• f4c9824 🐛 fix(search): bound recency decay — clamp the multiplier and expose the relevance floor (#67)
• c3724fc 🐛 fix(search): order the preserved lexical tail by score (#75)
• 595f954 🐛 fix(search): reject out-of-range --decay-floor and negative --half-life (#72)
• ed91d8d 🐛 fix(site): point the 404 page and llms.txt at the clean doc URLs (#101)
• c1a2bc6 🐛 fix(site): publish docs at clean URLs instead of /_generated/ (#93)
• d13344a 🐛 fix(template): accept a v0.1 flat-string sources list for required_fields (#82)
• abec539 🐛 fix(template): resolve v0.2 nested provenance in required_fields (#61)
• 5c6d4b4 📝 docs(commands): generate the command reference from the cobra tree with a CI drift gate (#86)
• 0e90f49 📝 docs(help): give every command a Long description and runnable Example (#84)
• 64c523e 📝 docs(readme): rewrite the README as an on-ramp, not a command dump (#85)
• 498848c 📝 docs(repo): fix launch-facing gaps in README, SECURITY, and front page (#94)
• 336f7d4 🔧 chore(ci): pin actions to commit SHAs and attest build provenance (#104)
• e56f58d 🔧 chore(ci): run the site test suite, not just the site build (#102)
• ca6c946 🔧 chore(deps): land the queued dependency updates (#103)
• c5cf892 🔧 chore(lint): re-enable gosec and errcheck with per-site triage (#105)