v0.5.0

Changelog

• 6ce6c59 Bootstrap segspec: config-to-NetworkPolicy CLI tool
• e2071ca feat: add --format per-service for per-service ingress+egress policies
• 92a1924 feat: add --helm-values flag for custom Helm values file
• bea1ff4 feat: add AI-powered dependency analysis with --ai flag
• b678c46 feat: add EgressFor() to DependencySet for per-service egress filtering
• 7ae754d feat: add GitHub URL auto-clone support
• 18889f1 feat: add IngressFor() to DependencySet for ingress policy generation
• 9aceaf2 feat: add Sources() to DependencySet for ingress graph inversion
• 0d95730 feat: add diff mode for CI/CD change detection
• 63062ce feat: add e2e integration tests with fullstack fixture
• 5f3b9d3 feat: add evidence and JSON output formats
• 056b6f0 feat: add evidence layer to all parsers
• bf2bd1d feat: add wave-1 parsers — spring, compose, k8s, envfile, buildfile
• b6f5c55 feat: detect Helm charts by finding Chart.yaml
• 7264730 feat: dual-mode AI — local (Ollama/NuExtract) or cloud (Gemini Flash)
• f205e53 feat: interactive TUI for dependency review (--interactive / -i)
• 5dabd0e feat: parse Helm chart rendered output in walker
• c84b8a6 feat: per-service NetworkPolicy generation with ingress + egress
• 3f9b364 feat: shell out to helm template with 30s timeout
• 90f62f0 fix: CLI robustness improvements from audit
• b1a3d23 fix: remove internal state files and docs from public repo
• f7e9478 fix: rename module path from dormorgenstern to dormstern
• 06ffaf6 fix: resolve 12 audit findings from QA, security, and architecture review
• 27241a7 security: extract and harden secret redaction
• b606130 wave-0: foundation — model, registry, walker, CLI, renderers
• 8d9816b wave-2: renderer tests — summary + NetworkPolicy YAML