v4.11.0

4.11.0 (2026-05-05)

Features

• cicd: add AI PR risk passport (#294) (750faa4)
• cicd: add PR evidence cards (#291) (10b21fd)
• debt: show saved history (#287) (8b4a4c1)
• defend: add versioned OWASP coverage (#295) (355b4f2)
• quality: add standards-backed practice enforcement (#283) (c432260)
• security: flag mixed-script paths (#288) (8689902)
• security: flag unverified webhook handlers (#289) (4127578)

Bug Fixes

• architecture: preserve submodule coupling targets (#296) (90a1e1d)
• cli: repair display severity filtering (#280) (0c3b929)

Documentation

• contributing: add contributor roadmap (#292) (d398b8a)
• security: document webhook signature rule (#290) (3024850)