v2.33.0

2.33.0 (2026-10-18)

Bug Fixes

• dlp: encoded-secret inspection no longer fails open on decode limits (84e37e9), closes #338
• policy: close MCP shell routing bypasses from the third #338 review (8b9a53b)

Features

• exposure: the dashboard's 2b contract on the proxy side (fw#318 2b step 2) (d4d9c3d)
• injection: the scan's origin booster follows the source roles (fw#328) (fcd52c3), closes #318