v0.3.0

What's Changed

• fix: replace literal spaces with \s+ to prevent wide-whitespace mutation by @debanjan-bhuinya in #38
• fix: close the remaining wide-whitespace mutation bypasses in pattern.go by @domehahn in #44
• fix: SKIL-BOUNDARY-MCP-CONFIG false-positives on a skill's own manifest by @domehahn in #45
• feat(analyzer): charset-smuggling defense (P0) by @domehahn in #46
• feat: analyzability model, distinct from inspection completeness (P1) by @domehahn in #47
• feat: .pyc bytecode integrity — PEP 552 header + source correlation (P1) by @domehahn in #48
• feat: cross-skill capability composition — toxic flows (P1) by @domehahn in #49
• feat: Dynamic MCP Assurance (skil mcp assure) by @domehahn in #50
• feat: Deterministic Threat-Chain Correlation by @domehahn in #51
• feat: official GitHub Action and pre-commit integration by @domehahn in #52
• feat: local component discovery (skil discover) by @domehahn in #53
• feat: Semantic Multi-Run Consensus (--semantic-runs) by @domehahn in #54
• feat: Ruby AST analysis (builtin.ruby-ast) by @domehahn in #55
• feat: Nested Artifact Virtualization by @domehahn in #56
• feat: global AnalysisBudget with fail-closed partial coverage by @domehahn in #57
• feat: Transitive External Reference Scanning by @domehahn in #58
• feat: MCP Surface Lock v2 (SKIL-MCP-012) by @domehahn in #59
• feat: Multi-Skill Runtime Assurance (skil compose assure) by @domehahn in #60
• feat: extend skil discover to five more agent tools by @domehahn in #61

New Contributors

• @debanjan-bhuinya made their first contribution in #38

Full Changelog: v0.2.0...v0.3.0