v3.1.27

• audit --format sarif now emits real SARIF v2.1.0 across all six audit sections (was falling back to markdown)
• init hook is version-pinned instead of @latest, restoring deterministic scans; re-run upgrades a stale hook
• malformed .guardviberc now warns on stderr instead of failing silently