What's Changed

• chore(deps): consolidate dependency and registry maintenance by @msaad00 in #4516
• fix(registries): harden Glama release freshness by @msaad00 in #4517
• fix(cwpp): enforce runtime evidence integrity by @msaad00 in #4518
• fix(ci): remove privileged untrusted checkout by @msaad00 in #4519
• feat(runtime): add canonical client profile foundation by @msaad00 in #4520
• feat(runtime): enforce canonical client profiles in gateway by @msaad00 in #4521
• Restore scanning feature description in README by @msaad00 in #4522
• docs(readme): lead with control-plane scale by @msaad00 in #4524
• fix(docs): align README storefront contract by @msaad00 in #4525
• feat(runtime): add durable gateway activity ledger by @msaad00 in #4523
• chore(deps): consolidate UI and workflow maintenance by @msaad00 in #4534
• fix(security): enforce trusted maintenance and trial boundaries by @msaad00 in #4535
• fix(graph): make topology and completeness contracts honest by @msaad00 in #4536
• fix(deploy): harden AWS control-plane secret wiring by @msaad00 in #4537
• test(deploy): guard the AWS control-plane secret wiring contract by @msaad00 in #4539
• test(overview): isolate the process-global caches /v1/overview reads by @msaad00 in #4540
• fix(cwpp): serialize runtime-evidence schema bootstrap across processes by @msaad00 in #4541
• chore(deps): bump @tanstack/react-virtual from 3.14.8 to 3.14.9 in /ui by @dependabot[bot] in #4542
• fix(gateway): make agent containment actually contain by @msaad00 in #4544
• chore(deps-dev): bump jsdom from 30.0.0 to 30.0.1 in /ui by @dependabot[bot] in #4543
• feat(cost): attribute LLM spend and fuse it into the unified graph by @msaad00 in #4545
• feat(graph): surface spend and one-click containment on the canvas by @msaad00 in #4547
• fix(gateway): stop identity revocation failing open on a large roster by @msaad00 in #4548
• fix(mcp): pin the MCP SDK to the major that ships our entry point by @msaad00 in #4550
• fix(ci): make MCP server tests hermetic instead of registry-dependent by @msaad00 in #4549
• test(cloud): stop faked provider SDKs leaking between test files by @msaad00 in #4553
• fix(scan): resolve conflicting advisory severities upward, not by sort order by @msaad00 in #4551
• fix(ci): keep the metrics snapshot working when git refuses the checkout by @msaad00 in #4554
• perf(gateway): stop the live feed freezing the whole control plane by @msaad00 in #4555
• fix(graph): a filtered view of a truncated snapshot is still truncated by @msaad00 in #4557
• fix(audit): stop one tenant's policy audit entry discarding another's by @msaad00 in #4556
• perf(gateway): make the activity feed durable and cursor-backed by @msaad00 in #4558
• fix(cis): fail closed on stale remediation bindings by @msaad00 in #4559
• fix(cis): restrict root remediation to break-glass use by @msaad00 in #4560
• fix(cis): restore provider-verified remediation commands by @msaad00 in #4561
• fix(integrity): fail closed on missing and malformed evidence by @msaad00 in #4562
• Remove image section from README by @msaad00 in #4563
• fix(runtime): bind tenant work and bound hot paths by @msaad00 in #4564
• ci: route documentation-only changes through fast gates by @msaad00 in #4565
• fix(control-plane): restore bounded result honesty by @msaad00 in #4566
• fix(models): surface malicious artifacts as findings by @msaad00 in #4567
• fix(skills): audit instruction-only files by @msaad00 in #4568
• fix(graph): scope credential identity to servers by @msaad00 in #4569
• fix(graph): bound Postgres edge reconciliation by @msaad00 in #4570
• chore(deps): bump lucide-react from 1.27.0 to 1.28.0 in /ui by @dependabot[bot] in #4572
• chore(deps): update release and registry actions by @dependabot[bot] in #4573
• fix(api): reject malformed requests, degrade on unreadable manifests, and close tenant gaps by @msaad00 in #4576
• fix(compliance): score only the controls the scan actually evidenced by @msaad00 in #4579
• fix: stop reporting bounded, sampled, and uncomparable results as certain by @msaad00 in #4580
• test(ui): stop a debug screenshot failing the large-graph E2E by @msaad00 in #4581
• fix: report the degraded evidence the product already detected by @msaad00 in #4582
• fix(compliance): derive the posture score from the status, once by @msaad00 in #4583
• docs: correct the PCI coverage claim and record what shipped by @msaad00 in #4586
• fix(hub): stop compliance ingest breaking on a date certain by @msaad00 in #4587
• test(scale): guard the read path's shape, not the runner's mood by @msaad00 in #4588
• test(scale): assert the paging contract instead of timing it by @msaad00 in #4591
• perf(findings): let the severity filter reach the store in the facet pass by @msaad00 in #4592
• fix(scan): scan the whole archive, promote every model flag, run the IaC rules by @msaad00 in #4593
• fix(scan): order Packagist, NuGet and RubyGems by their own version rules by @msaad00 in #4594
• fix(graph): stop a bounded traversal reporting its own budget as the total by @msaad00 in #4595
• fix(output): carry the KEV deadline everywhere and stop unresolvable bounds passing as confident by @msaad00 in #4596
• chore(metrics): stop the snapshot re-stamping itself on every run by @msaad00 in #4597
• fix: close the pre-freeze P0 batch across fleet tenancy, skills detection, graph rollup and version ordering by @msaad00 in #4599
• fix(graph): make attack-path search honest about its bounds and stop it scanning the estate per hop by @msaad00 in #4600
• fix: gateway enforcement, write/read contract alignment, and a scale-to-zero demo by @msaad00 in #4601
• fix(audit): read the tenant that was asked for, and run the Postgres suites CI never ran by @msaad00 in #4603
• fix(ingest): report what the batch actually stored, not what it received by @msaad00 in #4604
• chore(docs): stop advertising a hosted demo from the public repo by @msaad00 in #4605
• fix(cli): check the inventory path before refreshing the vuln DB by @msaad00 in #4606
• test(gateway): assert the loop stayed free, not how fast the runner was by @msaad00 in #4608
• fix(azure): call SDK methods that exist, and let CI see when they don't by @msaad00 in #4609
• fix(release): close 0.98.3 correctness gaps by @msaad00 in #4610

Full Changelog: v0.98.2...v0.98.3

What's Changed

• refactor(ui): tailor posture workspaces and investigation graphs by @msaad00 in #4495
• test(release): lock product workflows after v0.98.1 by @msaad00 in #4496
• fix(cli): stabilize demo agent identities by @msaad00 in #4497
• fix(exports): keep optional enrichment read-only by @msaad00 in #4498
• fix(ui): preserve evidence in operator views by @msaad00 in #4499
• fix(evidence): preserve runtime and graph projections by @msaad00 in #4500
• fix(release): harden demo and package evidence by @msaad00 in #4501
• chore(release): prepare 0.98.2 by @msaad00 in #4502
• fix(release): close first-run and scale gates by @msaad00 in #4503
• docs(readme): clarify audience and self-host paths by @msaad00 in #4504

Full Changelog: v0.98.1...v0.98.2

What's Changed

• fix(deploy): tighten public demo AWS boundary by @msaad00 in #4464
• fix(deploy): allow demo redeploy session to complete by @msaad00 in #4465
• fix(auth): provision hosted invitations atomically by @msaad00 in #4466
• feat(trial): enforce managed AWS guardrails by @msaad00 in #4467
• fix(product): align filters, links, metrics, jobs, and telemetry by @msaad00 in #4468
• fix(jobs): preserve status counts for legacy responses by @msaad00 in #4469
• feat(trial): complete durable execution and tenant lifecycle by @msaad00 in #4470
• refactor(ui): simplify workspaces and make graphs interactive by @msaad00 in #4471
• fix(db): keep every vulnerable window from multi-branch advisories by @msaad00 in #4473
• chore(runtime): retire the Go runtime tier by @msaad00 in #4474
• docs(release): refresh product proof and lock release contracts by @msaad00 in #4475
• fix(api): keep blocking request work off the event loop by @msaad00 in #4476
• fix(scan): match every vulnerable window and stop reading dates as SHAs by @msaad00 in #4477
• fix(reachability): match distributions to the import names code uses by @msaad00 in #4478
• fix(graph): bound the investigation load and declare what it omits by @msaad00 in #4479
• docs(readme): restore the badge row and tighten the hero by @msaad00 in #4480
• fix(readme): restore the storefront contract the badge row broke by @msaad00 in #4483
• fix(deploy): compose the control-plane database URL in cluster by @msaad00 in #4481
• chore(release): target 0.98.1 instead of an unpublished 0.99.0 by @msaad00 in #4485
• fix(cloud): gate the routes that spend the platform's own cloud identity by @msaad00 in #4482
• docs(readme): restore the MCP tool-count sentence Glama reads by @msaad00 in #4487
• perf(jobs): cache the status counts the dashboard polls by @msaad00 in #4486
• fix(ui): redact unhandled error boundary messages by @msaad00 in #4488
• fix(ticketing): make Postgres schema migration-owned by @msaad00 in #4489
• feat(accuracy): measure CVE range matching against advisory ground truth by @msaad00 in #4491
• fix(auth): enforce roles in no-auth mode by @msaad00 in #4490
• fix(product): canonicalize finding facets and observed metrics by @msaad00 in #4493
• refactor(ui): simplify navigation, connect, and scan by @msaad00 in #4494

Full Changelog: v0.98.0...v0.98.1

What's Changed

• docs(perf): gateway relay baseline and Go-gate measurement by @msaad00 in #4424
• feat(runtime): extract gateway pure-relay contract (Phase 2) by @msaad00 in #4425
• feat(runtime): Go gateway-relay sidecar spike (Phase 3) by @msaad00 in #4427
• fix(cloud): align Connections org copy and Helm fan-out flags by @msaad00 in #4428
• feat(runtime): event-collector Go Phase 1 stub and contract by @msaad00 in #4429
• fix(ci): cancel superseded required runs promptly by @msaad00 in #4432
• feat(cloud): Connections org fan-out on scan by @msaad00 in #4430
• fix(demo): persist findings with migrated postgres by @msaad00 in #4433
• feat(cloud): Connections continuous scan stack by @msaad00 in #4431
• feat(cloud): Connections scheduler drain concurrency by @msaad00 in #4437
• feat(cloud): Connections continuous wizard and CLI parity by @msaad00 in #4442
• fix(ci): treat blank surface-freshness env vars as unset by @msaad00 in #4444
• chore(deps): combine dependency updates (2026-07-24) by @andres-linero in #4441
• fix(docs): split AppSec and GRC persona cards by @msaad00 in #4446
• chore(ci): combine readme quick start and CI test timing fixes by @msaad00 in #4449
• fix(docs): correct SECURITY.md CSP claim for the UI preview config by @msaad00 in #4450
• fix(cloud): bind tenant context and sanitize scheduler scan failures by @msaad00 in #4452
• fix(db): add Connections scope and scan-mode columns to the Postgres migration authority by @msaad00 in #4451
• fix(deploy): bundle the dashboard in the API image and make the airgap profile render by @msaad00 in #4453
• fix(ui): fit and theme the exposure-path board without hiding tool and credential hops by @msaad00 in #4454
• fix(deps): replace vulnerable brace-expansion dependency line by @msaad00 in #4458
• fix(ci): run the Postgres contract job for scheduler and ingest changes by @msaad00 in #4455
• fix(sarif): carry advisory description and remediation into exported rules by @msaad00 in #4456
• fix(release): align collector, scheduler, and public proof contracts by @msaad00 in #4461
• fix(cli): normalize scan push URL and give the gateway a runnable first command by @msaad00 in #4460
• fix(cloud): make connection scope authoritative and secure collector forwarding by @msaad00 in #4459
• fix(tests): restore full-suite lint compliance by @msaad00 in #4462
• chore(release): prepare 0.98.0 by @msaad00 in #4463

Full Changelog: v0.97.5...v0.98.0

What's Changed

• fix(deploy): preserve legacy demo overlay before pull by @msaad00 in #4409
• chore: drop public co-author deny-list and harden release README by @msaad00 in #4410
• fix(deploy): use shipped driver for postgres migrations by @msaad00 in #4411
• feat(ui): make context and investigation graphs the canvas hero by @msaad00 in #4412
• feat(ui): punchier graph captures and skill capability contracts by @msaad00 in #4414
• chore(ops): fail closed on missing UI Hub tag and fix pilot compose by @msaad00 in #4413
• feat(ui): distinct graph proof shots and labeled relationships by @msaad00 in #4415
• chore(deps): bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3 by @dependabot[bot] in #4416
• chore(deps): bump lucide-react from 1.25.0 to 1.26.0 in /ui by @dependabot[bot] in #4417
• fix(deps): bump postcss to 8.5.12 for CVE-2026-45623 by @msaad00 in #4420
• fix(deploy): harden EKS reference install path by @msaad00 in #4421
• docs(arch): Python-primary runtime; optional Go sidecar later by @msaad00 in #4423
• chore(release): 0.97.5 by @msaad00 in #4422

Full Changelog: v0.97.4...v0.97.5

What's Changed

• fix(release): unblock 0.97.4 publish from skill SARIF noise by @msaad00 in #4405
• feat(inventory): publish bounded evidence completeness by @msaad00 in #4407
• fix(graph): align investigation path evidence by @msaad00 in #4408
• ci: make main validation path-aware and fail closed by @msaad00 in #4406

Full Changelog: v0.97.3...v0.97.4

What's Changed

• ci(release): enforce version alignment across all deploy surfaces + fix 0.97.0 drift by @msaad00 in #4332
• docs(audits): persona progress audit v0.93.5 → v0.97.1 by @msaad00 in #4333
• fix(demo)+feat(attest,graph): harden demo path, MCP attest CLI, store-backed auto-enable by @msaad00 in #4336
• chore(deps): batch UI + actions dependency bumps by @msaad00 in #4345
• fix(deploy)+feat(auth): self-host first-run bootstrap, anonymous demo, and guided OIDC/SSO setup by @msaad00 in #4335
• fix(helm): make control-plane self-host come up cleanly on first install by @msaad00 in #4337
• fix(mcp,audit): align tool-count honesty and rich audit exit codes by @msaad00 in #4346
• chore(release): prepare 0.97.2 by @msaad00 in #4347

Full Changelog: v0.97.1...v0.97.2

What's Changed

• test(auth): pin the auth posture 401/403/200 contract matrix by @msaad00 in #4311
• feat(auth): bind API keys to a stable principal id for id-based deprovision (closes #4274) by @msaad00 in #4315
• fix(deploy): make Helm defaults self-consistent by @msaad00 in #4316
• docs(parity): align release surfaces and personas by @msaad00 in #4317
• fix(check): fail closed on ambiguous package input by @msaad00 in #4318
• fix(output): preserve finding and coverage parity by @msaad00 in #4319
• perf(output)+fix(graph,deps): finding-projection reuse, graph edge/mutation bounds, brace-expansion CVE fix by @msaad00 in #4323
• fix(graph): publish bounded response completeness by @msaad00 in #4325
• docs(gateway): align runtime example with shipped CLI by @msaad00 in #4327
• feat(graph): add opt-in store-backed producer by @msaad00 in #4326
• fix(deploy): bound cloud scans and provision graph workspace by @msaad00 in #4328
• fix(output): publish advisory and asset identity contracts by @msaad00 in #4329
• fix(graph): honor mounted Postgres workspace secrets by @msaad00 in #4330
• chore(release): prepare 0.97.1 by @msaad00 in #4331

Full Changelog: v0.97.0...v0.97.1

What's Changed

• refactor(api): consolidate auth resolution into one resolve_principal pipeline (#4274) by @msaad00 in #4290
• fix(auth): boot-time non-superuser DB preflight; guard the audit fork-guard index by @msaad00 in #4292
• fix(audit): select the audit chain head by chain link, not timestamp by @msaad00 in #4293
• feat(graph): random-access reads for the graph build workspace by @msaad00 in #4295
• chore(deps): consolidate weekly dependency and registry updates by @msaad00 in #4301
• fix(output): harden evidence exports and graph rendering by @msaad00 in #4302
• fix(runtime): close matching and Postgres correctness gaps by @msaad00 in #4303
• feat(graph)+fix(export): store-backed UnifiedGraph (unwired) and unified-type parquet/lake export by @msaad00 in #4308
• fix(security): auth posture single-source + OIDC-invalid decision; legacy audit-checkpoint backfill by @msaad00 in #4309
• chore(release): prepare 0.97.0 by @msaad00 in #4310

Full Changelog: v0.96.4...v0.97.0

What's Changed

• chore(deps-dev): bump vite from 8.1.4 to 8.1.5 in /ui by @dependabot[bot] in #4057
• fix(overview): make connector/bulk-ingested estates first-class in the exec pane by @msaad00 in #4059
• fix: three scanner/CLI correctness bugs (malicious remediation, AST skip-dir scope, --agent-mode coverage) by @msaad00 in #4060
• feat(connect): emit ready-to-run read-only onboarding artifacts by @msaad00 in #4058
• feat(auth): first-class SSO provider presets at /login by @msaad00 in #4062
• Harden the bulk/connector ingest write path for scale and availability by @msaad00 in #4061
• fix(overview): keep executive top risks honest across API and UI by @msaad00 in #4064
• Virtual, scoped, revocable model-provider key broker by @msaad00 in #4065
• feat(connections): guided Verify step in the connect wizard by @msaad00 in #4067
• governance[8/8]: audit-event OTLP-log export + EDR/MDM device-posture ABAC by @msaad00 in #4066
• feat(auth): Snowflake OAuth dashboard sign-in by @msaad00 in #4069
• feat(scan): scanner coverage — Go reachability, OS/distro breadth, live-K8s by @msaad00 in #4073
• docs: full-stack "Architecture & how it works" in README + tighten ARCHITECTURE by @msaad00 in #4076
• fix(gateway): fail closed on conditional-access evaluation error by @msaad00 in #4080
• perf(graph): streamed-persist + bounded reconciliation-set for graph writes by @msaad00 in #4074
• fix(scan): scanner-coverage accuracy + security hardening by @msaad00 in #4077
• fix(ci): bootstrap Git before Alpine checkout by @msaad00 in #4081
• perf(hub): atomic + batched ingest write path and sub-linear overview snapshot by @msaad00 in #4078
• feat(export): scheduled findings export to object stores + warehouses (S3 + ClickHouse + Snowflake) by @msaad00 in #4082
• feat(integrations): MCP-first ITSM/ticketing connector [WIP] by @msaad00 in #4084
• fix(ci): restore root-logger handlers between tests (xdist stdout pollution → 3.13 failure) by @msaad00 in #4085
• feat(connect-wizard): AWS Organization StackSet onboarding path by @msaad00 in #4088
• feat(self-posture): operator self-audit of agent-bom's own deployment by @msaad00 in #4089
• perf(graph): bounded prior-snapshot digest + single-pass streaming persist by @msaad00 in #4091
• feat(integrations): connect-once ticketing UI + Azure/GCS/BigQuery/Databricks export sinks by @msaad00 in #4090
• fix(audit): make posture and evidence outputs honest by @msaad00 in #4096
• fix(graph): make streamed snapshot retries atomic by @msaad00 in #4097
• fix(deploy): make release proof and health contracts honest by @msaad00 in #4098
• feat(onboarding): connect-depth (deep-scan + DSPM opt-in), all-regions, Snowflake SPCS from wizard by @msaad00 in #4099
• feat(remediation): prioritize campaigns and unify investigations by @msaad00 in #4100
• fix(mitre): bound evidence mappings to observed context by @msaad00 in #4102
• fix(formats): enforce CycloneDX reference uniqueness by @msaad00 in #4109
• fix(postgres): restore store parity by @msaad00 in #4110
• chore(deps): consolidate routine dependency updates by @msaad00 in #4121
• fix(exports): publish warehouse runs atomically by @msaad00 in #4122
• fix(cspm): fail closed on unevaluable benchmark evidence by @msaad00 in #4124
• feat(self-posture): operator self-audit UI panel by @msaad00 in #4123
• fix(graph): persist attack-path analysis status by @msaad00 in #4132
• perf(compliance): bound and reconcile hub reads by @msaad00 in #4133
• fix(dspm): retain complete vector scan evidence by @msaad00 in #4128
• feat(ciem): activate bounded AWS IAM usage evidence by @msaad00 in #4129
• feat(kspm): add native evidence-aware transport by @msaad00 in #4135
• feat(ciem): add fail-closed authorization evidence contract by @msaad00 in #4139
• fix(postgres): restore bootstrap, snapshot, and edge parity by @msaad00 in #4140
• fix(compliance): reconcile executive finding counts by @msaad00 in #4143
• feat(sast): add canonical SARIF integrity boundary by @msaad00 in #4144
• feat(ciem): collect fail-closed Azure and GCP authorization evidence by @msaad00 in #4145
• perf(compliance): offload and keyset hub reads by @msaad00 in #4146
• feat(compliance): align executive and findings scopes by @msaad00 in #4147
• feat(sast): align execution integrity and product surfaces by @msaad00 in #4148
• docs(readme): lead with scan-first run and sync product proof by @msaad00 in #4149
• refactor(runtime): public gateway policy eval and freeze package layout by @msaad00 in #4150
• feat(snowflake): complete SPCS Native App distribution by @msaad00 in #4160
• fix(gateway): restore identity-bound drift enforcement and event fidelity by @msaad00 in #4161
• fix(attestation): require external DSSE signer trust by @msaad00 in #4163
• fix(graph): render bounded rollup cards eagerly by @msaad00 in #4164
• refactor(ast): consolidate the JS and TS analysis package by @msaad00 in #4167
• security(runtime): publish fail-mode matrix and retire command allowlist theater by @msaad00 in #4168
• feat(ciem): project proved authorization evidence into graph by @msaad00 in #4171
• fix(cloud): surface Snowflake inventory evaluation gaps by @msaad00 in #4173
• feat: advisory AI triage checkpoint, CLI init evacuation, bounded discovery walks by @msaad00 in #4174
• docs(readme): lead with what/who/how, dedupe sections, compact diagrams by @msaad00 in #4176
• feat(ciem): surface authorization evidence health by @msaad00 in #4178
• fix(security): close IAM condition-drop and gateway conditional-access/identity-scope fail-opens by @msaad00 in #4179
• fix: audit P0/P1 — event-loop offload, SCA matching + Go reachability honesty by @msaad00 in #4180
• fix(identity): fail closed on partial IAM evidence and unpinned JWT audience by @msaad00 in #4182
• fix(graph): keep distinct credential nodes instead of collapsing to one phantom node by @msaad00 in #4183
• fix(audit): serialize the tamper-evident hash chain to prevent forks under concurrent writes by @msaad00 in #4185
• fix(gateway,dspm,sast): honest KPIs, drift-cap signal, coverage warnings, aggregated SAST status by @msaad00 in #4186
• fix(exec): reconcile none-band + KEV counts, correct narrative command, label demo totals by @msaad00 in #4189
• fix(postgres): shared idempotency store and RLS backstop parity by @msaad00 in #4192
• feat(cspm): provenanced benchmark control inventory and coverage drift gate by @msaad00 in #4196
• feat(mitre): refresh bundled ATT&CK catalog to v18.1 with pinned provenance by @msaad00 in #4197
• fix(hub): combined read-path scope filtering + atomic ingest, validation, honest truncation by @msaad00 in #4198
• feat(ciem): AWS Access-Advisor over-privilege findings + AWS/GCP identity governance from usage telemetry by @msaad00 in #4199
• feat(graph): typed ATT&CK/ATLAS technique mappings + consume dropped posture signals (combines #4201 + #4210) by @msaad00 in #4213
• fi...