v1.12.0

Added

• Independent desktop, mobile, and JavaScript-disabled Chromium render profiles
  with raw/rendered parity artifacts and bounded interaction discovery.
• Partial-failure evidence and --resume-run recovery that reuses only
  successful profiles from an immutable source run.
• Optional repeated local Lighthouse execution with pinned runtime metadata,
  per-run artifacts, lab/field separation, and median metric summaries.

v1.11.0

Added

• Bounded media evidence collection for local PDF text/metadata with page
  anchors, transcript cues with provenance, and image alt/caption context.
• Explicit optional OCR behavior and media-to-claim linkage validation through
  citable observe media --input <manifest> [--ocr].
• Medium-specific limitations that prevent extraction from being represented as
  claim support, reading-order validation, transcription accuracy, or semantic equivalence.

v1.10.0

Added

• Version-pinned audit schedules that invoke the canonical audit path and keep
  external trigger limitations explicit.
• Hash-bound, non-authoritative GitHub annotation projections from immutable runs.
• Differential comparability dimensions for resource, evidence artifact,
  detector, configuration, observation method, tool, and external-system changes.

v1.9.0

Added

• Materiality-ranked semantic review queues with explicit missing-input states,
  reviewer assignment, hash-bound decisions, and independent adjudication.
• Reproducible census and seeded random sampling plans recording population
  hashes, inclusion/exclusion criteria, assignment method, and extrapolation limits.
• citable reviews queue|prioritize|plan|sample|evaluate workflows.

v1.8.0

Added

• Schema-validated reviewer, review-policy, and governed-exception registries
  with role authorization, declared conflicts, separation-of-duty controls,
  expiry, renewal limits, supersession, compensating controls, and audit history.
• citable governance validate and citable governance evaluate for
  policy validation and immutable enforcement-disposition evidence packages.
• Finding, policy, and evidence hash binding so stale approvals fail closed.

Changed

• Accepted exceptions no longer alter technical finding state. Reports preserve
  technical_state: failed and record accepted_exception only as a separate
  enforcement disposition with explicit residual risk and validity.
• The supported runtime floor is Node.js 24, matching all CI, package, release,
  and trusted-publishing gates.

v1.7.0

Added

• Multidimensional evidence authority metadata separating source authority,
  collection authority, authenticity, and representativeness.
• A staged crawler-identity evidence contract that requires checksummed range
  provenance, DNS, edge, and origin evidence before fully_verified.
• JSON/CSV production-log normalization and Bing Search Performance or AI
  Performance owner-export observations with explicit interpretation limits.

Changed

• Crawler log observations no longer reduce identity to an
  identity_verified boolean; incomplete and contradictory chains remain
  visible in the immutable evidence.

v1.6.0

Added

• Optional read-only connector SDK with explicit non-secret connection state,
  property discovery, access validation, bounded synchronization, and disconnect.
• Google Search Console Search Analytics and GA4 Data API adapters that collect
  declared metrics into immutable observations without storing access tokens.

v1.5.1

Fixed

• Ship release now explicitly dispatches trusted npm publishing at the newly
  created tag because GitHub suppresses workflow events generated by its own
  repository token.

v1.5.0

Added

• Installer aliases compatible with the common skills CLI interface:
  repeatable --agent/-a, --skill/-s, --copy, -p, -g, and *
  provider selection.
• Explicit copy-only integrity policy and actionable rejection of unsupported
  symlink installs.
• Structured pull request controls with code ownership, a required PR contract,
  Conventional Commits title validation, and release-note enforcement.
• Review-gated release preparation and shipping workflows with semantic-version
  consistency checks, changelog-derived GitHub releases, protected tagging, and
  npm trusted publishing handoff.
• Optional provider-neutral metric, objective, intervention, and connection-state
  contracts with strict schema and referential validation.
• CSV/JSON metric imports, user-owned objective creation and validation, and
  evidence-deduplicated baseline/evaluation reporting with explicit guardrails
  and inconclusive outcomes.

Fixed

• citable install --all now selects every supported provider in addition to
  confirming non-interactively.
• Release preparation now updates and validates the canonical skill version in
  addition to package, lockfile, changelog, and roadmap versions.