v3.1.0

What's Changed

• Correct tool version reporting + post-v3.0.3 doc/example hygiene by @kpifinity in #96
• Implement four L3 sovereignty conformance harnesses by @kpifinity in #97
• Phase0/credibility sweep by @kpifinity in #100
• Release v3.1.0-alpha.2: version bumps, CHANGELOG cut, release notes by @kpifinity in #102
• Chore/repo cleanup by @kpifinity in #103
• Fix/docs stale stragglers by @kpifinity in #104
• feat(evals): SKI Evals — the verdict-accuracy evaluation suite by @kpifinity in #105
• fix(evals): close the real-model output-contract gap the first eval r… by @kpifinity in #107
• chore(evals): nightly run dumps raw model output; raise token budget by @kpifinity in #108
• feat(conformance): implement the L3 ledger tamper-resistance rig (5 o… by @kpifinity in #109
• fix(evals): the real-model scores were measuring a timeout, not a model by @kpifinity in #110
• feat(conformance): implement the L3 air-gapped boot rig (6 of 6) by @kpifinity in #111
• feat(benchmarks): performance benchmark suite by @kpifinity in #112
• fix(evaluator): degrade, never crash, on schema-violating model output by @kpifinity in #113
• docs(crosswalks): EU AI Act crosswalk - article-level control mapping by @kpifinity in #114
• fix(evals): prompt v4 - stop the model re-scoping the pre-scoped snapshot by @kpifinity in #115
• fix(verifier): ground observations in the measurement by @kpifinity in #116
• feat(backends): vLLM backend - production GPU inference with guided decoding by @kpifinity in #117
• feat(deploy): Helm chart - constraints enforced at render time by @kpifinity in #118
• feat(schemas): extract ski-schemas - the wire contract defined once (RFC 0003 PR 1) by @kpifinity in #119
• feat: beta hardening - /metrics contract, predicate parity, working quickstart by @kpifinity in #120
• fix: no unverified CLEAR; assertions grounded in the cited obligation by @kpifinity in #121
• chore(release): bump to 3.1.0-beta.1 by @kpifinity in #123
• fix(verifier): normalize satisfied flags mechanically before averify by @kpifinity in #124
• fix(deps): bump cryptography 46.0.7→48.0.1, pypdf 6.12.2→6.13.3; make dependency-review advisory by @kpifinity in #126
• feat: interactive quickstart wizard + Codespace badge by @kpifinity in #125
• fix(quickstart): use real sha256 KG hash for provenance by @kpifinity in #130
• chore: normalize versioning to v3.1.0-beta.1 + fix README roadmap ordering by @kpifinity in #132
• ci: gate PyPI publish to GA (final) releases only by @kpifinity in #133
• chore: tidy repo foundation (docs links + clutter) by @kpifinity in #135
• build: upgrade base images and CI to Python 3.14 by @kpifinity in #138
• ci: restrict Dependabot groups to minor/patch updates by @kpifinity in #137
• ci: auto-merge minor/patch Dependabot PRs by @kpifinity in #136
• test: coverage gates + fail-closed negative tests for safety-critical modules by @kpifinity in #142
• conformance: adversarial-telemetry (T9) — injection cannot silently CLEAR a breach by @kpifinity in #143
• ci(security): extend bandit to the sidecar, telemetry buffer, and KG tools by @kpifinity in #144
• safety+docs: fail-safe default tiering (tier-1), telemetry trust boundary, docstring hygiene by @kpifinity in #145
• Release: v3.1.0 (GA — hardened for OT) by @kpifinity in #146
• [chore]: bump the tools-minor-patch group across 4 directories with 11 updates by @dependabot[bot] in #147
• fix(release): drop stale cyclonedx-bom==4.4.3 downgrade that breaks the wheels job on Python 3.14 by @kpifinity in #148

New Contributors

• @dependabot[bot] made their first contribution in #147

Full Changelog: v3.0.3...v3.1.0