v0.10.1

Added

• Release installer script (scripts/install.sh) for uv-first CLI installation with az-rbac-watch added to the user PATH

v0.10.0

Added

• Framework compliance mapping module (CIS Azure Benchmark)
• CLI refactored into cli/ package with one module per command

Changed

• Recentered the README and published docs around the CLI-first workflow (discover, scan, audit, validate, snapshot, diff)
• Clarified the project scope around a single supported interface: the CLI
• Refreshed dependency constraints and lockfiles to address current security updates
• Hardened the composite GitHub Action by running without shell eval and installing from action source for deterministic behavior
• Tightened CLI contracts: explicit --tenant-id now bypasses local policy auto-detection, and framework mode enforces HTML-only output constraints
• Standardized user-facing naming around az-rbac-watch in reports and package metadata

Removed

• Removed the MCP server codepath and packaging extras to keep the project focused on the CLI and CI/CD workflow

Documentation

• Added published command pages for snapshot and diff

v0.9.0

style: auto-format compliance and mapper modules

v0.4.2

chore: test PyPI publish after repo recreation

v0.4.1

Documentation update — README covers all v0.3.0 and v0.4.0 features

v0.4.0

Change tracking — snapshot capture and diff comparison

v0.3.0

Orphaned assignment detection (--orphans-only)

v0.2.0

Initial public release — RBAC as Code, Policy as Code, auto-discovery