v1.18.1

What's Changed

• docs(pilot): external design-partner pilot protocol and evidence/interview kit by @pcguest in #59
• fix(proxy): journal all exchange observations and disclose journal-write loss by @pcguest in #61
• chore(release): prepare v1.18.1 by @pcguest in #62

Full Changelog: v1.18.0...v1.18.1

v1.18.0

What's Changed

• security(python): audit release-tooling and SDK runtime dependency graphs by @pcguest in #45
• chore(deps): bump @vitest/mocker and vitest in /sdk/typescript by @dependabot[bot] in #18
• chore(deps-dev): bump vitest from 4.1.8 to 4.1.11 in /web by @dependabot[bot] in #22
• feat(ux): UX1-A investigation shell — identity, navigation, continuity by @pcguest in #46
• feat(ux): UX1-B evidence-workbench hierarchy and surface differentiation by @pcguest in #47
• docs(ux): record UX-1 investigation-workbench baseline (addendum) by @pcguest in #48
• fix(semantics): bound verification/tamper claims and correct evidence labels by @pcguest in #49
• fix(acquisition): bind checkpoint to committed bundle head, durable writes, continue-dedup by @pcguest in #50
• fix(capture): continuity, dedupe, secret and health hardening by @pcguest in #51
• feat(capture): continuous-capture slice on atb intercept by @pcguest in #52
• fix(capture): continuous-capture pilot certification hardening by @pcguest in #54
• test(capture): journal capture-path rejection events by @pcguest in #55
• docs(pilot): continuous-capture pilot kit and packaging script by @pcguest in #56
• chore(release): prepare v1.18.0 by @pcguest in #57
• test(coverage): raise aggregate Go coverage above the 80% release gate by @pcguest in #58

New Contributors

• @dependabot[bot] made their first contribution in #18

Full Changelog: v1.17.0...v1.18.0

v1.17.0

What's Changed

• docs: establish clean W3 practitioner harness baseline by @pcguest in #26
• feat: clarify run/evidence status terminology and align documentation by @pcguest in #29
• feat(acquisition): continuity, provenance and investigation surface by @pcguest in #30
• fix(security): align checkpoint and scan trust boundaries by @pcguest in #31
• feat(evidence): add stable semantic locators by @pcguest in #32
• docs(attribution): define evidence attribution layer by @pcguest in #33
• fix(schema): represent acquisition envelope metadata by @pcguest in #34
• fix(ts-sdk): preserve acquisition envelope metadata by @pcguest in #35
• fix(web): clear high-severity dependency advisories by @pcguest in #37
• fix(python-sdk): preserve acquisition envelope metadata by @pcguest in #36
• fix(web): remediate next RCE and axios advisories by @pcguest in #41
• fix(bundle): declare acquisition canonical profile as manifest v3 by @pcguest in #38
• docs(acquisition): define start attach import and continuous modes by @pcguest in #40
• chore(dev): add end-user harness and operating model by @pcguest in #39
• docs(ux): publish evidence-governance UX gate and UX-0 baseline by @pcguest in #42
• chore(release): prepare v1.17.0 by @pcguest in #44

Full Changelog: v1.16.0...v1.17.0

v1.16.0

What's Changed

• feat(release): prepare ATB v1.16.0 by @pcguest in #16

Full Changelog: v1.15.4...v1.16.0

v1.15.4

What's Changed

• chore(release): prepare v1.15.4 Docker architecture recovery by @pcguest in #11

Full Changelog: v1.15.3...v1.15.4

v1.15.3

Highlights

• Adds bounded local capture and privacy-safe rejection evidence.
• Applies process-safety limits to bundle loading without changing the bundle format or canonical hashes.
• Makes PageIndex an optional Python SDK extra and pins CI and release tooling.
• Hardens viewer session scoping and release validation, with additional security and accessibility checks.

See the v1.15.3 changelog for full release details.

ATB v1.15.0

Highlights

• Added optional digest-only reviewer identity evidence across the Go, Python, and TypeScript SDKs. ATB reports label it as caller-provided and not independently verified.
• Added an offline compliance-pack export and retention audit events.
• Updated the viewer to surface additional event families and labels.
• Ensured revealing masked fields records a separately verifiable sidecar without changing the authoritative evidence bundle.
• Improved optional custody upload behavior, signing flow, cross-SDK checks, and documentation.

See the v1.15.0 changelog for the release details.