v1.3.4 — NIST SP 800-81r3 audit prompt

What's new

New analyst prompt: nist_800_81r3_audit

A structured domain security audit aligned with NIST SP 800-81r3 (Secure DNS Deployment Guide, March 2026). Covers nine control areas with NIST section references:

1. Registration integrity — registrar, expiry, registrar lock (RDAP)
2. Delegation integrity — lame delegation check per §3.6.2
3. CNAME integrity — dangling CNAME / subdomain takeover per §3.6.1
4. CAA records — certificate issuance constraints
5. DNSSEC chain — algorithm per NIST Table 1, RRSIG validity window per §3.8.2
6. Denial of existence — NSEC vs NSEC3 per updated §3.8.3 guidance (NIST now prefers NSEC)
7. Email authentication — SPF and DMARC per §3.5.1
8. Reputation — Spamhaus DBL, URIBL, SURBL
9. Resolver integrity — transparent proxy / hijacking detection

Produces a scannable report with ✅/⚠️/❌ per control area and a prioritized remediation table.

Invoke via slash command in Claude Code CLI:

/mcp__dns-mcp__nist_800_81r3_audit

Other changes

• e2e test suite updated to 36 tests (prompt count 3→4, new content spot-check for nist_800_81r3_audit)
• README: tool count corrected to 27, prompts/ and tools/ added to file structure, NIST audit example added to Quick Start

No tool changes

All 27 tools are unchanged from v1.3.3.