Release v0.4.0 · saradamian/agentic-base

What's Changed

feat(domain): the four gaps set in the structure, and the blocks mapped to the plan by @saradamian in #40
feat(redaction): redact a transcript with Presidio before it is written by @saradamian in #47
feat(redaction): names from Gemma on Willma, GLiNER fallback, patterns always, fail closed by @saradamian in #48
feat(domain): record whether the person was told, and whether the output was marked by @saradamian in #60
feat(api): a tenant can take its whole corpus in one request by @saradamian in #62
feat(domain): retention with the six-month floor, and an erasure the chain survives by @saradamian in #61
feat(api): an audit log written with every change, and an endpoint that verifies it by @saradamian in #68

docs(architecture): the blocks for what an agent does, and whether SURF could run one by @saradamian in #36
docs: design pass, stale facts fixed, blocks completed against the AI Factory material by @saradamian in #37
docs: where logging, security, safety and compliance live, and what the regimes ask by @saradamian in #39
docs: content stays, references to internal sources go, and a guard keeps it that way by @saradamian in #41
docs: present tense, and the compliance page agrees with the record by @saradamian in #44
docs: the AI Factory task and deliverable numbers on the public pages by @saradamian in #42
docs(architecture): oversight, classification, ledger and redaction as capabilities by @saradamian in #45
docs: bring every page to the current design, and redraw the picture by @saradamian in #46
docs(compliance): the regimes in force today, including two this page never named by @saradamian in #58
docs: the incident runbook, because two clocks now start on the same day by @saradamian in #63
docs: every page says what the code does today by @saradamian in #64
docs: re-read every page against the code, and hold the names pages give to the tree by @saradamian in #66

ci(security): dependency review, pip-audit, Scorecard, and an SBOM attested to every release by @saradamian in #38
test(hygiene): detect by shape, not by word, and prove each detector on a plant by @saradamian in #43
ci(release): grant write permissions to the job that uses them, read-only by default by @saradamian in #49
chore(deps): update dependency ruff to v0.16.7 by @renovate[bot] in #50
chore(deps): drop the direct httpx2 entry from the dev group by @saradamian in #56
chore(deps): lock file maintenance by @renovate[bot] in #54
test: give every test its own database, and stop writing one into the working tree by @saradamian in #59
ci(security): scan every file and commit for credentials, with a rule for our own key shape by @saradamian in #57
ci(release): publish to PyPI the files the release attested, not a second build by @saradamian in #65
chore(deps): update dependency coverage to v7.16.1 by @renovate[bot] in #67
chore(release): 0.4.0 by @saradamian in #69

Full Changelog: v0.3.4...v0.4.0