v0.4.60

0.4.60 (2026-09-11)

✨ Features

• platform: decode policy min_points and the push response's global score into a verdict (83dbfba)
• platform: evaluate resolved policies as first-class runs with no local fallback (1fedc61)
• platform: in platform mode the resolved policies drive the log, the push and the exit code (8f4b6ba)
• platform: local gates, thresholds and the degraded exit are inert in platform mode (551eac6)
• platform: per-policy artifacts, badge and MR comment from the platform verdict (5ef59c2), closes #467
• platform: per-policy log sections and the platform verdict block (13d0da9)

🐛 Bug Fixes

• platform: a --no-controls run is not platform mode in the summary (65ae90c)
• platform: carry each run's not-evaluable marks in its policy report entry (d16571b)
• platform: decode the gate strictly, only the global score tolerantly (ef0733a)
• platform: honest verdict line, collection diagnostics and header in platform mode (db8aedf)
• platform: inventory runs keep their guards in platform mode, pin the run-level dismissal mark (ee6de90)
• platform: platform-mode artifacts carry only the policies' verdicts (b8c3411)
• platform: tolerant gate decode and validated global letter (9c292fe)
• platform: track the two image controls independently in pbom verdicts (2928548)

📚 Documentation

• platform: platform mode evaluates only the platform's policies and takes its verdict (8ff0c69)
• platform: replace em dashes and restore template backticks (f73aa78)

✅ Tests

• platform: cover outputControlEntries's multi-policy accumulation (7e7fe68)
• platform: cover the post-action and pbom summaries through the cmd path (7e334ba)
• platform: cover the report's un-applied policy entry and min_points (93b6185)
• platform: cover the union's not-evaluable swap and the degraded sections (e10cc50), closes #220
• platform: pin the notEvaluable key removal in platform-mode json reports (6cc5dd0)

👷 CI/CD

• release: pin v0.4.59 refs [skip ci] (8da00d4)