v0.4.0

Binary asset sha256 (threat-detect-linux-amd64): sha256:761f75b148e507ac90eac1b1288a5c149cf4472ceb1cb7cc77ed8a5858e4e2a6
Binary asset sha256 (threat-detect-linux-arm64): sha256:682366c5ea775063b56c7bba3353967ce4a2dbf6413873ccbe5ea345da5a9970
Binary asset sha256 (threat-detect-darwin-x64): sha256:0c6a00573236c2110dc0ed5d469bdaa2c32fdaad238bc9ab13f854bd3250b6bb
Binary asset sha256 (threat-detect-darwin-arm64): sha256:da37c2cd8cc796b59bdec7c2bf93820d6ca7e38811a0bf2d43ce1bdbb7c44750

What's Changed

• fix(artifacts): emit ERR_VALIDATION warnings for degraded/missing inputs by @davidslater in #750
• feat(conclude): distinguish threat detection engine failures from real findings by @davidslater in #752
• feat(detector): honor GH_AW_DETECTION_CONTINUE_ON_ERROR for missing artifacts by @davidslater in #751
• docs(devguide): drop stale transcript-scraping fallback claim by @davidslater in #759
• fix(detector): stop flagging gh-aw safe-outputs scaffolding as prompt injection by @davidslater in #760

Full Changelog: v0.3.5...v0.4.0