Watchpost v0.0.1

First release of Watchpost: local-first, evidence-backed reviews of changes between saved Nmap XML scans.
Delivers the scope of the v0.1 project brief.

Install

Install watchpost-cli from PyPI into a virtual environment with Python 3.11+:
python3 -m pip install 'watchpost-cli==0.0.1'

The distribution name is watchpost-cli. The command and module remain watchpost.
The registry package named watchpost belongs to an unrelated project. Do not install it for this tool.
The package does not include the synthetic example files. To run the demos, use a
source checkout.

Included

• Inspect explicit IPv4/TCP observations in one saved scan.
• Compare completed TCP connect or SYN scans with matching Nmap versions and declared port coverage.
• Require human confirmation of scan location, intended targets, and remaining settings.
• Preserve missing observations as not observed, never assumed closed.
• Generate deterministic Markdown reports with evidence, limitations, suggested checks, and blank review fields.
• Protect existing report files and notes with non-replacing output.
• Reject unsafe XML, unsupported inputs, incompatible scans, and reported host timeouts.
• Provide three synthetic walkthroughs and a user wiki.
• Distribute Watchpost under the MIT license.
• Provide a manual, environment-approved Trusted Publishing workflow for TestPyPI and PyPI.

Boundaries

Python 3.11+ on Linux or Ubuntu WSL. CI covers Python 3.11, 3.12, and 3.13.
Inputs are limited to 10 MiB per snapshot. Report output requires a trusted directory with hard-link support.
Watchpost does not scan, upload data, or make runtime network calls.
It does not infer device/application identity or declare a network secure or compromised.

No live scanning, scheduling, dashboard, packet capture, UDP/IPv6 support, AI verdicts, or automatic remediation.

Verification

See the release-readiness checklist.
The 0.0.1 package was verified on TestPyPI and PyPI after upload.