v2.4.0

What's Changed

• docs(roadmap): v2.3.0 shipped by @ikaruscareer in #172
• fix(ci): skip version-match check for floating v2 tag by @ikaruscareer in #173
• test(benchmarks): document static subprocess precision limitation by @Teachmeplaycode in #174
• feat: show policy profile in reports by @nikitajos7 in #175
• docs: credit new contributors by @ikaruscareer in #176
• feat(report): add architecture component diagram to HTML reports by @ikaruscareer in #178
• docs: audit good-first-issues against current codebase by @ikaruscareer in #177
• docs(roadmap): integrate AI-governance assessment direction by @ikaruscareer in #179
• docs(roadmap): fix three stale planned markers by @ikaruscareer in #180
• Build(deps): bump sigstore/cosign-installer from 3.10.1 to 4.1.2 by @dependabot[bot] in #188
• Build(deps): bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.1 by @dependabot[bot] in #186
• Build(deps): bump build from 1.5.0 to 1.6.1 by @dependabot[bot] in #183
• Build(deps): bump urllib3 from 2.7.0 to 2.8.0 by @dependabot[bot] in #184
• docs: strategic reorientation around Agent Authority Security by @ikaruscareer in #190
• feat(v2.4): ChangeGuard lanes + evidence hardening (WS1-WS5) by @ikaruscareer in #191
• fix(ci): pin cosign-release to v2.6.1 explicitly by @ikaruscareer in #192
• feat(v2.4.x): security architecture hardening (WS1-WS11) by @ikaruscareer in #193

New Contributors

• @Teachmeplaycode made their first contribution in #174
• @nikitajos7 made their first contribution in #175

Full Changelog: v2.3.0...v2.4.0