v3.3.0

Full Changelog: v3.2.0...v3.3.0

v3.2.0

What's Changed

• Substrate v5: RFC 8785 canonical adoption (binding v5) by @sftimeless in #30

Full Changelog: v3.1.0...v3.2.0

v3.1.0

What's Changed

• Expand permit decision binding coverage to v1/v2/v3/v4 (independent offline verification of MPP + delegation permits) by @sftimeless in #29

Full Changelog: v3.0.1...v3.1.0

v3.0.1

What's Changed

• docs(public): replace internal milestone jargon with customer-facing terms by @sftimeless in #28

Full Changelog: v3.0.0...v3.0.1

v3.0.0

What's Changed

• Release keel-verifier v2.7.0 by @sftimeless in #27

Full Changelog: v2.6.0...v3.0.0

v2.7.0

What's Changed

• v1.0.0: sync with keel-api Phase A/B/C/D verifier by @sftimeless in #1
• docs: add asymptote disclosure to README by @sftimeless in #2
• fix(verifier): detect array-order tampering as WALK_SEQUENCE_INVERSION by @sftimeless in #4
• docs(cli): fix api.keel.com -> api.keelapi.com in help strings by @sftimeless in #3
• [codex] docs: precision-harden README language consistency by @sftimeless in #5
• Bundle live permit_binding_signing keys; release v1.0.2 by @sftimeless in #6
• README clarity pass + Lock B asymptote re-lock by @sftimeless in #8
• Add scheduled CI to detect trust-root vs live-endpoint drift by @sftimeless in #7
• verifier: fail closed on unsigned export manifests by @sftimeless in #9
• feat: verify workflow_evidence/v1 + incident manifest v2 by @sftimeless in #10
• release: v1.1.0 — workflow_intent verification by @sftimeless in #11
• Step 4 PR 3: verifier adjudicators + historical registry bundling + ~17 corpus fixtures (v2.3.0 contract) by @sftimeless in #12
• Step 4 PR 4 (keel-verifier): cross-repo parity + PyPI 2.3.0 publish prep by @sftimeless in #13
• A.2: TSA witness on signed manifest + keel-verify self-check CLI by @sftimeless in #14
• Fix TSA witness parser: swap rfc3161-client for asn1crypto (BER-tolerant) by @sftimeless in #15
• v2.4.1: switch cosign sign-blob to --new-bundle-format by @sftimeless in #16
• v2.4.2: source-drift fixes + PyPI Trusted Publishing by @sftimeless in #17
• Suppress benign sigstore-python 'unsupported key type: 7' warning by @sftimeless in #18
• v2.4.3: bump version + regenerate embedded manifest by @sftimeless in #19
• Consolidate version-parity tests + add drift scanner by @sftimeless in #20
• v2.4.4 — self-check remediation + shadow-import detection by @sftimeless in #22
• Add PERMIT_V2 §4.3 verifier predicates (3 adjudicators) by @sftimeless in #21
• v2.5.0 — explicit --published-wheel self-check mode by @sftimeless in #23
• v2.5.1 — keel-verify doctor diagnostic command by @sftimeless in #24
• Hotfix: import DIST_NAME from install_diagnostics by @sftimeless in #25

Full Changelog: v0.2.0...v2.7.0

v2.6.0

What's Changed

• [codex] Add PERMIT_V2 slot signature adjudication by @sftimeless in #26

Full Changelog: v2.5.1...v2.6.0

v2.5.1

What's Changed

• v2.5.1 — keel-verify doctor diagnostic command by @sftimeless in #24
• Hotfix: import DIST_NAME from install_diagnostics by @sftimeless in #25

Full Changelog: v2.5.0...v2.5.1

v2.5.0

What's Changed

• Add PERMIT_V2 §4.3 verifier predicates (3 adjudicators) by @sftimeless in #21
• v2.5.0 — explicit --published-wheel self-check mode by @sftimeless in #23

Full Changelog: v2.4.4...v2.5.0

v2.4.4

What's Changed

• Consolidate version-parity tests + add drift scanner by @sftimeless in #20
• v2.4.4 — self-check remediation + shadow-import detection by @sftimeless in #22

Full Changelog: v2.4.3...v2.4.4