Noulette v1.0.3 (Windows x64)

Attack attempts in production (SQL, NoSQL, XSS, command, path traversal, SSRF, XXE, Log4Shell, attack tools, brute force) are now always reported with a patch plan, an alert, an approval and a LOGS.md entry. The AI can no longer call them safe. Inspection adds a mandatory attacker check and live injection probes. PostHog: project tokens (phc_) are refused with a clear explanation; addresses accept pasted links.

SHA-256 (both files identical): 00c1e5c16ed72e3d4f4e4da10176688c97cdbbdffd9524a4afe04f8f101f228d

Not code-signed yet: if SmartScreen appears, choose More info, then Run anyway.