v0.4.12

Changelog

• d3f6e1b Merge branch 'codebase-cleanup'
• e71c9c2 Merge branch 'prescribe-split-tools'
• b8d767b add tuned smart prescribe contract
• 0f56e3f docs: add Proxy Mode section to MCP setup guide — when, why, limitations
• d566661 docs: add evidence modes comparison table to README
• 68f8ffd docs: add protocol compliance insight to README
• 2755179 docs: add smart prescribe prompt guidance
• 22570d9 docs: align API reference with live routes
• 19bf873 docs: align readme prescribe mode labels
• 1f4fa05 docs: clean up README — modes table at top, remove benchmark section
• 6090d0b docs: correct external ingest openapi
• 2656f50 docs: define evidence ingest taxonomy
• b5e1f92 docs: describe split prescribe tools
• a14ee0b docs: design external lifecycle ingest
• ca48691 docs: document external lifecycle ingest
• 91b1666 docs: explain smart prescribe mode
• a44880a docs: finish public wording reconciliation
• b09c3f2 docs: fix external ingest contract docs
• 1df8931 docs: fix prescribe override schema
• 207a38b docs: humanize prescribe mode wording
• 7d84dc6 docs: plan external lifecycle ingest
• 78abd17 docs: reconcile normative protocol surfaces
• 11bf1fb docs: refine smart prescribe design notes
• d51fd3c docs: restore thin ingest docs wrapper
• 2d0f07c docs: smart prescribe design — proven with Gemini Flash, ready to implement
• 9521de1 docs: split prescribe prompt contract
• 26c593c docs: split smart prescribe design
• be26e95 docs: tighten external ingest contract docs
• d90b089 docs: tighten report ingest contract
• d6fc1fa docs: update landing taxonomy wording
• f80a66a docs: update positioning — flight recorder + intelligent scoring
• 8e52b7e feat: add SKILL_SMART template to prompt generation pipeline
• da3c382 feat: add evidra-proxy — transparent MCP stdio proxy for auto-evidence
• b0fc8b1 feat: add external ingest api routes
• 0f43e8a feat: add external ingest api routes
• 177098c feat: add external ingest service
• d53f776 feat: add slim smart prescribe skill — 40 lines, proven with Gemini Flash
• fd07024 feat: add smart prescribe mcp path
• d1023c8 feat: allow smart prescribe contract shape
• b6df716 feat: clean up evidence ingest taxonomy
• edd8ce9 feat: define external ingest contracts
• b86558a feat: integrate proxy mode into evidra-mcp, remove standalone binary
• c0f722c feat: register split prescribe tools
• 4d15a12 feat: split prescribe tool contracts
• d17340b fix: add "diagnose first" to smart prescribe skill
• 36ab7be fix: align doc guard with inspector modes
• dbeff96 fix: allow override artifact digests and legacy duplicates
• f4dd8d6 fix: isolate webhook claim namespaces
• 6c363cd fix: keep webhook ingest compatibility internal-only
• 29280e3 fix: persist ingest claim result metadata
• a7d51a9 fix: preserve generic webhook session ids
• 24a85e2 fix: restore bump-version helper
• f532070 fix: restore promptfactory contract-version rendering
• dc4c7bd fix: satisfy golangci-lint in mcp proxy paths
• b60ff73 fix: soften translated ingest report resolution
• 534cdef fix: source prescribe ids from payload override
• 5b8190b fix: support report payload overrides
• fc34814 fix: tighten external ingest contract rules
• 51dd57b fix: tighten ingest contract validation
• d7c8570 fix: tighten ingest normalization
• b0d97a0 fix: use real MCP server example in proxy docs, not placeholder
• b04e165 merge: external lifecycle ingest prerequisite
• b9ca56f refactor: drop legacy prescribe handler
• 1159531 refactor: proxy uses execcontract types and canon-aligned classification
• 57b8323 refactor: remove legacy prescribe prompt surface
• 545922d refactor: route webhook ingest through shared service
• 5d41111 refactor: simplify promptfactory render specs
• 6b909c9 refine readme
• 798867e release: bump version to 0.4.12
• 37c2bd3 style: gofmt prompt definitions
• 9a08e3c test: cover split prescribe lifecycle
• 2f170c0 test: migrate inspector suite to split prescribe tools

v0.4.11

Changelog

• f304b88 Add Argo CD GitOps controller integration
• 1ce7e80 Add README rationale for non-proxy model
• b10cf0e fix: refresh landing page and SEO metadata
• 9ae2e20 refactor: split evidra-api startup initialization
• 28e943e refine readme again
• 23e1b65 release: bump version to 0.4.11

v0.4.10

Changelog

• 4e52063 docs: add anonymized evidence export design
• 574c502 docs: add signal maturity design
• 4df4f25 docs: add signal maturity implementation plan
• d0bc789 feat: add bench.evidra.cc link to landing page navigation and benchmark section
• 1790585 feat: add benchmark table and refine landing page
• a5210f4 feat: add evidra export --anonymize for safe evidence sharing
• 9b61e30 feat: align shared evidra execution contracts
• f17ef2d fix: address golangci-lint errcheck findings in pkg/export
• 6c8ac6d fix: complete anonymized export — add run metadata, fix entry_id, strip signal details
• 3c5b1fe fix: make execution subcommand return exit 0 with migration notice
• 90b26c6 fix: preserve decision_context and model versions in anonymized export
• 7f429cc fix: remove t.Parallel from version tests that mutate package globals
• 7ad72bc fix: update release guard to parse BaseVersion instead of Version
• 8e5a7f6 refactor: remove execution-mode experiments (moved to evidra-infra-bench)
• 858010d refine readme.md
• 6af148b release: v0.4.10

v0.4.9

Changelog

• 0c133b6 Merge branch 'feature/phase1-risk-inputs-rollout'
• 505060a build: bump version to 0.4.9
• 0250231 build: fix docker image CI and docs checks
• 6023458 build: track UI lockfile for Docker builds
• 6c74537 change readme
• 1d0cfe7 chore: complete phase 1 risk inputs rollout
• 11198c5 content: add 'The Gap' section between hero and features
• 83daab0 content: restructure signals section with primary/secondary split
• c74ed93 content: revise MCP setup section with protocol framing
• 82ceb6e content: revise architecture section with protocol-first tab order
• efe4513 content: revise features section to protocol-first framing
• 01e7dea content: revise getting started section
• 5797740 content: revise guides section with agent-first positioning
• 2058fc5 content: revise hero section to agent-first positioning
• 9a3cbd4 deps: add OpenTelemetry SDK and OTLP/HTTP metric exporter
• bf75ecc docs: add MCP assessment scaling design and plan
• e0e51dd docs: add public doc ownership headers
• a63421f docs: add skill install feature design
• f3bdb36 docs: add skill install implementation plan
• d23cfc3 docs: add skill setup guide and update CLI reference, MCP setup, README
• 80b769e docs: align command docs checks with current paths
• 58079dd docs: consolidate public contract docs
• ac8b88a docs: define webhook request schemas
• 40be6c9 docs: explain scoring model
• 4701c9e docs: normalize public doc naming
• ed3d013 docs: refresh public docs for risk inputs
• 9cb20d9 docs: refresh readme positioning
• d200dda docs: reposition readme around platform story
• 4c5c9a1 docs: stop tracking ignored internal docs
• 32a1bbd docs: update system design for risk inputs
• 0ea77ed feat: add evidra skill install CLI command
• 64b88e3 feat: add risk inputs core contract
• 51bf12d feat: add skill as 8th prompt template target
• 921d087 feat: add skill install step and guide card to landing page
• b383233 feat: add stand harness and online forwarding
• e46a1c0 feat: align phase 1 risk input interfaces
• 65c8b0a feat: replace custom JSON telemetry with OTLP protobuf via OTel SDK
• 298acd9 feat: replace custom JSON telemetry with OTLP protobuf via OTel SDK
• ee6b120 feat: revise landing page content to agent-first positioning
• ead9a38 fix: add hosted MCP mode to landing and onboarding pages
• 5d7fa98 fix: add incremental MCP assessment tracking
• 86fa2ef fix: align mapped prescribe payloads with risk inputs
• 7228c71 fix: align record contract provenance and digest fixtures
• adff774 fix: avoid duplicate OTLP metric exports
• 0c08e51 fix: back-port three wording improvements to CONTRACT.yaml
• e81adac fix: clean up mcpserver and cli dead paths
• 0e3c7f7 fix: dashboard stat overflow and self-hosted URL placeholder
• 1b468d6 fix: flatten MCP tool schemas for Claude API compatibility
• cb30c62 fix: format contract tests
• 7617bef fix: handle r.Body.Close error in online forwarding tests
• 29114dc fix: harden canon and detector edge cases
• 0dc7d75 fix: harden evidence integrity and align scoring docs
• d9e930c fix: harden protocol integrity and webhook flow
• 8eb53b9 fix: pin public scorecard signal contract
• 73045b3 fix: replay stored analytics chronologically
• f59ebd7 fix: require explicit generic webhook operation ids
• 7d22fd4 fix: validate invites before key issuance quota
• e006c1e readme corrections
• 9ec21ab refactor: bound api key last-used updates
• 4a9a6fe refactor: load public signals from manifest
• ce3cdb9 refactor: satisfy lifecycle lint checks
• 9505119 refine readme
• bbc2e68 refine readme
• 63d8072 test(ui): refresh landing hero expectation
• aa14d84 test: add skill install edge case and content verification tests
• 80b91cf test: align MCP inspector risk assertions
• de2dc49 test: recalibrate signal validation expectations
• e38a266 test: remove migrated stand harness
• 639c728 test: restore benchmark contract risk mapping
• d6c9b12 test: update contract findings CLI assertions
• ee890c2 test: update e2e risk assertions

v0.4.8

Changelog

• 357a191 build: bump version to 0.4.8
• 6e3c06c build: refresh prompt manifest hashes
• 8ac565b docs: align hosted analytics support contract
• 6780b32 docs: unify flight recorder positioning
• 1c77718 feat: add dashboard, onboarding wizard, and API documentation
• 88986cc fix: address codebase review findings (C1, C3, I1-I3, I6, I8, I10, M2-M3)
• e3b2d17 fix: address second codebase review findings (C1-C6, H1-H10)
• 32143a4 fix: align hosted tenant and analytics contracts
• 644e73c fix: remove dead webhook lint stub
• 166784c merge: align hosted tenant and analytics contracts
• 26840e9 refactor: rename module path to samebits.com/evidra
• 650ebf2 style: gofmt hosted tenant alignment files
• 11e8bca test: add grep fallback to acceptance corpus guard
• 7eee0b2 test: avoid self-match in module path guard

v0.4.7

Changelog

• 19a9969 docs: add MCP registry publication guide
• 4db08b5 docs: align hosted architecture docs and landing
• 37d61ad feat: extract db analytics adapter
• dd0af0f feat: graduate self-hosted analytics and webhooks
• 0890990 fix: align get_event output schema
• 18dc8e7 release: cut v0.4.7
• 5acbede test: cover db analytics adapter parity
• cd8cd1c test: fix corpus scaffold checks without rg
• b5b08b2 test: format analytics adapter test

v0.4.6

Changelog

• 1efd398 Merge branch 'decision-tracking-v1'
• 1b280c0 build: add release version bump helper
• b04cfea change mcp service description
• 3990737 chore: move prometheus backlog to backlog folder
• 1f29a13 chore: stop tracking archived plan docs
• b7f6be5 docs: add acceptance fixture status guide
• 657d22f docs: add command rebranding design
• d7cced4 docs: add compact and expanded record examples
• c58b836 docs: add compact record examples design
• 15b9f9b docs: add pretty scorecard design and plan
• 1f602ec docs: add public roadmap
• 8706e8e docs: add public roadmap design and plan
• 8207cf6 docs: add unified artifact fixtures design
• f97329b docs: align internal dataset architecture paths
• fd0cec2 docs: lead with compact record examples
• 17894e1 docs: refine command rebranding design
• 9ce63f5 docs: simplify command inference design
• a1ec065 docs: update command rebranding
• f9a6e2f feat: add decision tracking to report lifecycle
• 31bf6da feat: add pretty scorecard output
• fa5a34e feat: rebrand cli commands
• b9a146b fix: handle force-pushes in dco workflow
• 15d2184 fix: integrate signal validation remediation
• cdb0123 fix: separate scoring and spec versions
• d7d0ec6 refactor: harden core architecture and governance
• 9c9dad8 refine project description
• b6f7b89 refine project description
• debfd85 release: align v0.4.6 server metadata
• b49ff40 release: cut v0.4.4
• e85d40b release: cut v0.4.5
• 1274924 release: cut v0.4.6
• 70ba246 remove benchmark wording
• 0896e85 test: add oss benchmark corpus foundation
• d1b79e4 test: ignore archived docs in naming guard
• d31c411 test: promote oss corpus into acceptance coverage
• ee4b8be test: rationalize e2e suite structure
• 1a865ac test: rename fixture and snapshot references
• 83a2dd7 test: scope artifact layout guard to tracked files
• dff7513 test: scope cli rebranding guard to user-facing docs
• 5006e51 test: unify shared artifact fixture paths

v0.4.3

Changelog

• 0354476 chore: gofmt risk matrix
• 5df4237 chore: remove stale self-hosted placeholders
• b6e6ff4 chore: untrack archived plan docs from git
• 34db605 docs: add architecture alignment remediation plan
• e3d1d35 docs: align contracts and self-hosted status
• 379a2d9 feat: return assessment snapshots from report
• e846e8a fix rendering of pipeline diagram
• f2eb63b fix: make risk level severity-aware
• cca2973 fix: mark hosted analytics as experimental
• d33f6f5 refactor: extract shared assessment builder
• 4f3cfe5 release: cut v0.4.3

v0.4.2

Changelog

• 099c7c4 Merge branch 'feat/risk-escalation'
• b3711ab add mcp client setup (docs+landing page)
• 0974817 chore: archive completed React landing page plans
• 7b938a3 docs: add MCP setup guide and landing page section
• 8021204 docs: add risk_escalation to OpenAPI spec and core data model
• b08ebd5 docs: add risk_escalation to guides and signal validation fixtures
• 373e01f docs: add v0.4.2 changelog entry
• 126a7b0 docs: update all '7 signals' references to 8 for risk_escalation
• 290980e feat: add risk_escalation signal detector with causal baseline
• 344cc2d feat: add risk_escalation signal spec section and e2e test
• a32015d feat: add risk_escalation to telemetry allowedSignalNames
• 82ff784 feat: add signals diagram to V1 architecture and landing page
• f15eb77 feat: register risk_escalation in AllSignals and add 0.10 scoring weight
• 20d2fba fix some ignore list
• af27149 fix: broken links and stale signal references across docs
• 8e3906a fix: correct relative links in ARCHITECTURE.md after move to docs/
• 8727eea fix: disable golangci-lint config verify (remote schema timeout)
• 594b48a fix: remaining stale '7 signals' refs and clarify tie-break test comments
• fe5ce35 fix: remaining stale signal count references in CHANGELOG, spec, and V1 arch
• aea4f48 fix: remove package-lock.json reference from Dockerfile.api
• 8fecd8e fix: replace npm ci with npm install (no lockfile in repo)
• 341cef0 move architecture doc to foc root folder
• 3e14288 test: verify score stability when risk_escalation count is zero

v0.4.0

Changelog

• fdcd4e0 Merge feat/api-backend: add self-hosted API backend (evidra-api)
• 13bc575 chore(build): add evidra-api to release config
• 5ac97a5 chore(deps): add pgx/v5 and golang-migrate/v4
• d7b3b9d chore: add ui-build and build-api Makefile targets
• d86587b chore: bump version to 0.4.0 for React landing page release
• 33e3ef4 chore: gitignore Playwright MCP logs and screenshot PNGs
• 4489cf6 chore: refresh benchmark contracts for v0.4.0
• 20b368d docs: add API backend deployment guide
• 8256c5a docs: update React landing page design and implementation plan
• db1fbea feat(api): add all handlers and router with 15 endpoints
• d51f935 feat(api): add evidra-api server binary with embedded landing page
• 624c593 feat(api): add go:embed with build tag for React UI
• a0a1cc7 feat(api): redesign landing page with docs and OpenAPI spec
• e47381d feat(auth): add static key and key store middleware with context helpers
• 7e2c05e feat(ci): add Dockerfile.hosted for supergateway-wrapped MCP server
• 8960685 feat(ci): build React UI into evidra-api Docker image and release binary
• 2b1439b feat(ci): build and push all three Docker images in release pipeline
• 2d8bd17 feat(cli): wire online/offline mode with --url, --api-key, --fallback-offline flags
• 09feba7 feat(client): add API client with forward, batch, ping, and error classification
• e157cc2 feat(db): add SQL migrations for tenants, entries, and benchmark runs
• 6b28393 feat(db): add connection pool and migration runner with golang-migrate
• 146af23 feat(deploy): add Dockerfile.api and update docker-compose with Postgres
• 58e9ec0 feat(mcp): wire online/offline mode with API forwarding
• 39650f4 feat(mode): add online/offline/fallback mode resolution
• f2911e0 feat(store): add key, entry, and benchmark stores
• 9301b61 feat(ui): React landing page with Vite + Tailwind v4
• f82a006 feat(ui): add CodeBlock component with copy button
• de44e11 feat(ui): add Landing page with all sections
• 68f9da4 feat(ui): add Layout with Header, StatusBar, Footer, and health polling
• f3de833 feat(ui): add MermaidDiagram component
• 6c6b85d feat(ui): add Protocol Sequence diagram tab to Architecture section
• 5cafc41 feat(ui): add Tailwind v4 with emerald theme tokens
• 231d00d feat(ui): add useTheme hook and ThemeToggle component
• faf81d2 feat(ui): scaffold Vite + React 19 + TypeScript project
• ab69913 fix(api): address code review security and correctness findings
• cb0805c fix(ci): update Dockerfiles to golang:1.24-alpine matching go.mod
• aa5acda fix(ci): use 'version' subcommand for evidra CLI smoke test
• 1bec24e fix(ci): use -version for evidra-api and hosted smoke tests
• 34c834c fix(lint): handle close error in ui_handler.go
• dfea956 fix(lint): handle close errors and remove unused aws helper
• 5966976 fix(test): remove t.Parallel from metrics hook test to fix data race
• f705e00 fix(ui): add missing build/dev/test scripts to package.json
• 52587c6 fix(ui): darken light theme background for better contrast
• e728659 fix(ui): deepen light theme green background tint
• 574c015 fix(ui): default to light theme regardless of OS preference
• d0f3128 fix(ui): fix CSS layer specificity so Tailwind utilities apply correctly
• b4d029a fix(ui): improve MermaidDiagram rendering with theme-aware re-render
• 2f8feec fix(ui): reduce section titles 20% and increase subtitles 20%
• a928f7c fix(ui): reorder architecture tabs — protocol sequence before system
• c99da4a fix(ui): tone down Get Started button in dark theme
• dd8872c fix: unify --version flag across all binaries
• 15b48d4 rename docker label name
• 11538fe test(api): add integration test for full API lifecycle
• e836743 test(ui): add App smoke test
• d4507fc update readmre for clear proejct msg