Releases · faustbrian/go-keyphrase

1.0.0 - 2026-08-25

Exclude intentional nested modules from root local-proxy archives so local,
bootstrap, CI, and public module checksums describe the same source
boundary.
Track the pinned documentation-tool lockfile so clean CI checkouts install
the exact validated cspell dependency.
Reconcile standalone dependency checksums against deterministic current
module archives so CI, local verification, and release consumers resolve
identical content.
Harden standalone documentation validation with deterministic spelling and
link checks, package-specific documentation gates, and repository-local
contributor guidance.

Correct stale package, standalone, and authoritative-source links in public
documentation.

Publish the module from its standalone github.com/faustbrian/go-keyphrase identity while preserving its documented API and behavior.

Replace obsolete standalone-repository links and workflow claims with
monorepo-canonical targets and current release guidance.
Link the package README to the repository-wide Golib documentation portal.
Delegate local mutation checks to the canonical exact-100 repository runner
and remove the superseded Gremlins installation and configuration.
Add unbiased password, passphrase, and BIP-39 generation.
Add pinned EFF and official BIP-39 word lists.
Add typed failures, exact entropy, resource limits, vectors, fuzzing,
benchmarks, documentation, and local release gates.

Source commit: 1224c16f900f857f4c8198874911d8bc9e55aae2
Exact-head CI: https://github.com/faustbrian/go-keyphrase/actions/runs/32907574480
Release dry-run: urn:sha256:b3516d48fa06c2d15e68e68255854d1a88c1021f2db4421099e6f74944be03e9
Assets include a CycloneDX SBOM, SLSA v1 in-toto provenance, and SSH-signed checksums.

Verify the checksum attestation with:

ssh-keygen -Y verify -f ALLOWED_SIGNERS -I brian@cline.sh -n golib-release -s SHA256SUMS.sig < SHA256SUMS