v1.0.0

First stable release. The CLI, the GitHub Action and the MCP server render the same 22 SOC 2 policy templates as https://policyseed.io, from one intake file, with no network calls and no dependencies.

What's in it

• CLI: policyseed init writes an intake.yaml, policyseed build renders the 22 policies into policies/, policyseed check exits 1 when a policy is overdue for review.
• GitHub Action (uses: odedmoshe/policyseed@v1): runs check (or build) in CI so an overdue policy review shows up as a red check. Inputs and outputs: docs/github-action.md.
• MCP server (policyseed mcp): lets Claude, Cursor or any MCP client interview you with the intake questions and render policies from the templates. Setup: docs/mcp.md.

Template changes since 0.2.0

• American spelling throughout.
• When MFA is not yet enforced for every account, the policies describe a dated rollout instead of stating MFA is in place.
• A new small_team context (headcount 1-10) gives incident response, business continuity and backup commitments a team without a staffed on-call rotation can meet, including a solo-responder path.
• Offboarding deadlines agree across the access, HR, acceptable use and physical security policies.
• Correct sentences when source control is "Other" or no CI/CD tool is named.

The full dated history is at https://policyseed.io/changelog.

Limits

These are templates, not legal advice and not an audit. Management adopts the policies and operates the controls; a CPA firm performs the SOC 2 examination. Review every policy before adopting it.