v0.22.1

0.22.1 (2026-09-04)

Bug Fixes

• archkeep: a zero-analysis discover run is no-verdict (#619, #620) (#634) (71b53c6)
• archkeep: a zero-analysis discover run is no-verdict, and the refusal header tells the truth (71b53c6), closes #619 #620
• archkeep: a zero-analysis graph run is no-verdict, not a complete snapshot (8a743cc)
• archkeep: a zero-analysis graph run is no-verdict, not a complete snapshot (#612) (#617) (8a743cc)
• archkeep: accept real attestation invocations, ship the verifier, dedupe adopters (#614) (2d40206)
• archkeep: canonical evidence snapshot bytes, frozen provenance loop, check byte gate (#636) (ed13bf2)
• archkeep: classify unresolvable external coordinates in every analyzer, not only TypeScript (#618) (efc8c00)
• archkeep: hostile names can no longer collide in edge identity or finding id (#627, #628) (ebdd892)
• archkeep: hostile names can no longer collide in edge identity or finding id (#627, #628) (#635) (dc17019)
• archkeep: hostile names can no longer collide in identity strings (#627, #628) (#638) (ebdd892)
• archkeep: mark Python's dynamic imports with the dynamic marker instead of withholding (#623) (#626) (13ddfc5)

Documentation

• close the narrowed roster and authority-verb sites (#582, #591) (#616) (90a0142)
• repair the fused impact table and the stale authority prose (035ef3c)
• repair the fused impact table and the stale authority prose (#615, #621) (#633) (035ef3c)