v0.1.0

Changelog

All notable changes to Impresari Context are documented here. The project uses
Semantic Versioning.

0.1.0 - 2026-08-22

Added

• A local-first Rust engine that builds compact, task-specific context packets
  from an exact repository snapshot.
• Verifiable source evidence, deterministic packet identity, explicit budget
  accounting, and visible completeness, exclusion, truncation, and staleness
  reporting.
• Read-only workspace discovery with protections for path traversal, symlink
  escape, hostile repository content, cache separation, and source mutation.
• Lexical retrieval and structural analysis for Rust, TypeScript, JavaScript,
  Python, Swift, and Kotlin.
• A command-line interface, neutral Rust library surface, reference client,
  consumer adapter contract, and local-only MCP server over standard I/O.
• Cross-platform CI, adversarial and conformance suites, release-candidate
  packaging, SBOM generation, dependency auditing, CodeQL, secret scanning,
  OpenSSF Scorecard, and bounded fuzz testing.

Security

Security review status: This release has not undergone an independent
third-party security audit. It has passed the project's documented automated,
AI-assisted internal, native-platform, dependency, static-analysis,
secret-scanning, fuzzing, packaging, checksum, and provenance checks. These
controls reduce risk but are not a substitute for independent review.

• Repository content is always treated as untrusted data and receives no
  policy, execution, network, or orchestration authority.
• The initial release does not load executable extensions, grant privileged
  extension capabilities, provide remote MCP transport, or claim cryptographic
  signer identity for context packets.
• No publicly known vulnerability in Impresari Context is fixed by this first
  release.