v1.0.4

What's Changed

• fix(release): set package versions from the tag before publishing by @sammysltd in #53

Full Changelog: v1.0.3...v1.0.4

v1.0.1

What's Changed

• [bug-fix] pytest has vulnerable tmpdir handling by @sammysltd in #31
• docs: tighten all READMEs and .md files by @sammysltd in #32
• docs: add makerchecker.ai website link to README by @sammysltd in #33
• docs: clean up licensing and feature request by @sammysltd in #34
• fix(sod): high-risk steps require a separation-enforcing gate by @sammysltd in #35
• Align README with website hook by @sammysltd in #36
• feat(server): add user bootstrap CLI to create first admin by @sammysltd in #37
• feat(server): add strict segregation-of-duties mode and auth-bind guard by @sammysltd in #38
• feat(server): structured logging with correlation IDs and redaction by @sammysltd in #39
• feat(engine): freeze agent model_config at step scheduling by @sammysltd in #41
• ci: add SBOM generation and container image CVE scan by @sammysltd in #44
• docs: add SOC 2 / ISO control-mapping crosswalk for GRC by @sammysltd in #42
• docs: add backup, PITR, and restore-drill runbook by @sammysltd in #43
• feat(server): checksum-validated PII redaction + boot warning when off by @sammysltd in #40
• chore(server): run container non-root, pin base, add healthcheck by @sammysltd in #45
• feat(web): writable roles, grants, and SoD admin controls by @sammysltd in #46
• feat(server): graceful shutdown and /readyz readiness probe by @sammysltd in #47
• feat(server): warn at boot on tamper-capable DB credential by @sammysltd in #48
• feat(deploy): add Helm chart for hardened Kubernetes deploy by @sammysltd in #49
• ci: publish npm packages with provenance on version tags by @sammysltd in #50

Full Changelog: v1.0.0...v1.0.1

v1.0.0

First public release of MakerChecker.