v0.7.5

Pandaone AI Agent v0.7.5 — Audit Infrastructure Improvements

This is a pre-release: contains CI/audit infrastructure improvements only. No PyPI publish for this version (no business code changes warranting a release).

What changed

The audit mechanism (.github/workflows/audit.yml L7 defense layer) was hardened across three PRs:

• PR #18: [skip-audit] commit marker now scans body (not just subject) — fixes false negative where audit ran despite the marker
• PR #19: docs-only PRs (only CHANGELOG.md, README*.md, docs/**, .github/PULL_REQUEST_TEMPLATE/**, LICENSE*, NOTICE*, etc.) automatically skip the L7 audit
• PR #20: regex bug fix — docs/* (literal) → docs/.* (recursive), so docs/foo/bar.md is correctly matched

Impact

• Documentation-only changes no longer require a [skip-audit] commit marker
• Future CHANGELOG/release-notes PRs auto-skip L7 audit (verified 4x: PR #21, #22, #24, #25)
• Code changes still go through full pandax ci validation

Compatibility

This is a CI-only change. No user-facing behavior change.

PRs in this release

• #18: [skip-audit] body scan
• #19: docs-only auto-skip
• #20: regex bug fix

Why this is marked pre-release

This release is tagged for audit trail completeness:

• CHANGELOG ↔ git history alignment (so git checkout v0.7.5 works)
• Reproducibility for CI infrastructure audits
• Releases page continuity (no skipped version numbers)

There is no pandaone-guard 0.7.5 on PyPI — this tag exists in git only.

Next release

v0.7.6 contains the brand cutover to pandaone-guard PyPI package.