v0.2.3

0.2.3 (2026-08-26)

Bug Fixes

• ci: name the real major on the checkout pin (#65) (113e08c)
• sphragis: correct verification authority (#69) (ce0bcf6)
• sphragis: tighten license policy (#68) (311a5c4)

v0.2.2

0.2.2 (2026-08-16)

Bug Fixes

• sphragis: clear pre-existing kanon-lint debt blocking the dispatch gate (#39) (cf0d8e7)

v0.2.1

0.2.1 (2026-08-16)

Bug Fixes

• ci: run CI on a pull request whose base is not main (#35) (77c86c8)

v0.2.0

0.2.0 (2026-08-16)

⚠ BREAKING CHANGES

• sphragis: make deterministic encapsulation private (#31)

Features

• sphragis: define revocation as key rotation, not re-wrapping (#34) (37ba8e3)
• sphragis: narrow the public API to the envelope profile, define the adapter seam (#32) (d0a0bb8)

Bug Fixes

• sphragis: bind the KAT gate to a machine-readable crypto provenance lock (#27) (65e3433)
• sphragis: bound and fully consume untrusted CBOR before accepting a wrapped key (#24) (d165e5b)
• sphragis: make deterministic encapsulation private (#31) (cf48668)
• sphragis: redact SharedSecret's Debug and retrofit SealError location (#33) (11216eb)
• sphragis: return typed entropy failures instead of panicking (#28) (2ff3a08)

v0.1.2

0.1.2 (2026-07-29)

Bug Fixes

• release: keep Cargo.lock in lockstep with the package version (#19) (6964d47)

v0.1.1

0.1.1 (2026-07-08)

Features

• sphragis: initial extraction — X-Wing hybrid KEM standalone crate (24c0db6)

Bug Fixes

• resolve all open audit findings (crypto correctness + zeroization) + lint-clean + Tier-U CI (#5) (3ddcf0e)
• sphragis: zeroize HKDF/sha2 digest state via the digest-0.11 generation (#7) (860d7f9)