v1.1.0

Changelog

• 4e92130 Merge pull request #19 from home-beekeeper/feat/install-posture-foundation
• 4971c3d docs(state): release-gate reviews done, H-01 fixed, PRs #19 + web #1 opened
• 1b76690 fix(31): reject posture allow --once --rule so the audit record can't over-claim (H-01)
• e1c330b docs(state): Phase 31 complete & verified; v1.5.0 code-complete, awaiting Gate 2
• 00d9f7d docs(31): install-posture coverage report with named gaps (REL-01)
• 11d383b ci(31): add e2e job and wire it into release-gate needs
• 96ab635 test(31): e2e posture git-remote warn + block at the live hook
• f87241a test(31): scoped override enforce-warn + ecosystem-scoped + persistence
• 35fff2b test(31): live-path block-mode for lifecycle + git-remote rules
• 44aa666 test(31): adapter fetch-timeout stays fail-soft warn under block mode
• a1b4452 test(31): release-age 24h boundary + each lifecycle script type fires
• 30b44cd docs(state): Phase 30 complete & verified (both repos); plan Phase 31
• 02def02 docs(30-01): add install-posture.md, document SENTRY-009 in threat model
• 0b0bfcf docs(30): plan Phase 30 install-posture docs, home page & boundary statements
• ed4958e docs: capture install-posture GSD handoff; record schema-keep decision
• 1b80fe2 docs(phase-29): mark complete (scoped override + per-rule severity)
• 6ee8185 test(29-02): scoped override tests incl. the catalog-bypass security distinction
• ead635d feat(29-02): posture override CLI + audit record + display-only TUI card (IPOVR-01/02)
• 1af13d5 feat(29-02): posture-scoped allowlist + allow-once store (IPOVR-01/02)
• 5771433 docs(phase-29): record 29-01 complete (per-rule severity); 29-02 in progress
• 86a5c9e test(29-01): per-rule posture severity + tighten-only + fail-soft-unknown (IPOVR-03)
• 9debb01 feat(29-01): posture adapter applies per-rule action; unknown stays warn (IPOVR-03)
• b2e316c feat(29-01): tighten-only untrusted posture merge (IPOVR-03 self-defense)
• cd5af47 feat(29-01): per-rule posture severity config + validation (IPOVR-03)
• bfca385 docs(phase-29): plan per-rule severity opt-up + scoped override
• 7a81ca2 docs(phase-28): mark complete; advance tracking to Phase 29
• cbc3ae3 feat(28-01): derive the displayed release-age window from the policy default
• 2e6f41f style(28-01): terminate the detected-version clause with a period
• b0b662f feat(28-01): read-only install-posture TUI dashboard panel (IPVIEW-01)
• eb53632 feat(28-01): beekeeper posture read-only CLI view (IPVIEW-02, IPBND-01)
• 3b1d61c feat(28-01): pure install-posture comparison model + npm detection (IPVIEW-01)
• 488d6a1 docs(phase-28): plan the read-only beekeeper posture view (CLI + TUI)
• d0ccd9a docs: Gate 1 PASSED — record boundary ratification + IPOVR-03 scope add
• 9658888 docs(27-03): tighten boundary copy so the shim reads as the opt-in exception
• 93312ba feat(27-03): make the shim actually enforce install posture (NMIG-04)
• 8de66fc docs(phase-27): mark implemented + verified; STOP at Gate 1
• 6387b20 style(phase-27): remove em-dashes from new install-posture code and comments
• 58921ff feat(27-02): Sentry observes install-class spawns (detection only, IPST-06)
• 391c4b4 feat(27-02): canonical install-posture boundary statement (IPBND-01)
• f575365 feat(27-01): wire install posture into the pre-exec hook (warn default)
• 5275296 feat(27-01): cached lifecycle-script adapter in internal/catalog
• df29105 docs(phase-27): plan Layer 1 hook enforcement + Sentry observation (Gate 1)
• 23decc6 docs(phase-26): mark complete; advance tracking to Phase 27
• fe1c692 feat(26-02): remove the package-manager nudge + repoint the shim
• 347e3cd feat(26-02): relocate pm-config readers into internal/posture
• 4451a1f feat(posture): detect git/remote-URL installs as a pure posture rule (IPST-04)
• c004b2d docs(phase-26): plan nudge removal + posture rule foundation
• 8ac429e docs: start milestone v1.5.0 Install Posture (ships as v1.1.0)