v4.4.3
4.4.3
First PyPI release after 4.4.2 was withdrawn (GitHub Release/tag deleted; never on PyPI). 4.4.1 stays on PyPI — do not yank it.
Sealed step content is full. Through 4.4.1, add_step truncated strings at 2000 characters. 4.4.3 seals the full payload, truncates only in the viewer, and records content_truncated on new manifests. Verify FAILs if that flag is true and WARNs when it is missing (all 4.4.1 and earlier artifacts). Documented in docs/KNOWN_LIMITATIONS.md.
Legacy signatures. A synthetic JSON null for content_truncated must not enter the Ed25519 preimage. Frozen goldens under tests/goldens/ must keep signature_valid true.
TRACE. origin.producer is epi-recorder/ plus the package version (get_version()), not the artifact spec_version.
Wheel + sdist + build-v4.4.3.epi attached. Windows installer may follow from CI.