agent-bom v0.85.0

What's Changed

• docs(diagrams): align engine-internals + compliance counts to current product state by @msaad00 in #2187
• feat(firewall): inter-agent firewall foundation — schema, loader, evaluator, CLI by @msaad00 in #2188
• feat(gateway): wire inter-agent firewall — evaluator, hot-reload, audit, healthz by @msaad00 in #2189
• feat(proxy): inter-agent firewall fast-path — TTL cache + fail mode + local fallback by @msaad00 in #2190
• feat(dashboard): firewall runtime overlay — counters + recent denials + top pairs by @msaad00 in #2191
• feat(discovery): per-run envelope — scan_mode + scope + permissions + redaction by @msaad00 in #2192
• feat(discovery): provider envelope parity — 11 providers wired by @msaad00 in #2193
• feat(discovery): envelope API surface + dashboard card by @msaad00 in #2194
• feat(discovery): least-privilege + redaction lock-in matrix by @msaad00 in #2195
• fix: v0.84.6 audit — SCIM DELETE list, auth-flag interplay, splash kind, rotate body by @msaad00 in #2196
• fix: v0.84.6 MCP audit — strict tool args, self-scan venv walk, skill verdict split, dedupe sandbox warning by @msaad00 in #2197
• chore: prepare v0.85.0 release by @msaad00 in #2198

Full Changelog: v0.84.6...v0.85.0

agent-bom v0.84.6

What's Changed

• chore: scrub tool-credit phrasing from regression-test docstring by @msaad00 in #2180
• feat(cli): startup banner, findings header label, severity-breakdown closer, OSV-first GHSA UX by @msaad00 in #2181
• fix(version-utils): handle npm SemVer pre-release tags in version compare by @msaad00 in #2182
• feat(cli): route scanner warnings through Rich during progress to stop spinner stacking by @msaad00 in #2183
• feat(cli): verdict-led compact posture summary, full panel behind --verbose by @msaad00 in #2184
• fix(cli): use Severity.value so the scan-complete severity closer renders content by @msaad00 in #2185
• chore: prepare v0.84.6 release by @msaad00 in #2186

Full Changelog: v0.84.5...v0.84.6

agent-bom v0.84.5

What's Changed

• Add MCP package version provenance by @msaad00 in #2174
• Prep 0.84.5 release by @msaad00 in #2175
• Fix pre-0.84.5 audit blockers by @msaad00 in #2176
• Harden post-0.84.5 scan contracts by @msaad00 in #2177
• Fix serve soak blockers before release by @msaad00 in #2178
• Close pre-tag audit follow-ups by @msaad00 in #2179

Full Changelog: v0.84.4...v0.84.5

agent-bom v0.84.4

What's Changed

• Bump release surfaces to v0.84.4 by @msaad00 in #2173

Full Changelog: v0.84.3...v0.84.4

agent-bom v0.84.0

What's Changed

• docs: enforce bundled skill guardrail contract by @msaad00 in #2138
• docs: clarify agent-bom owns skill contract by @msaad00 in #2139
• docs: add Snowflake POV deployment path by @msaad00 in #2140
• fix: render unified findings in human reports by @msaad00 in #2141
• fix: reflect MCP intelligence in graph risk state by @msaad00 in #2142
• fix: calibrate compact posture for policy findings by @msaad00 in #2143
• fix: add graph exploitable via edges by @msaad00 in #2146
• fix: align Snowflake EKS deployment profile by @msaad00 in #2148
• feat: add cloud discovery and ingest skills by @msaad00 in #2151
• feat: enrich MCP resources and tool capabilities by @msaad00 in #2152
• docs: align MCP catalog docs with server card by @msaad00 in #2153
• chore: prepare v0.84.0 release by @msaad00 in #2156

Full Changelog: v0.83.4...v0.84.0

agent-bom v0.83.4

What's Changed

• fix: preserve fleet endpoint identity in mesh by @msaad00 in #2116
• fix: harden gateway upstream resilience by @msaad00 in #2117
• docs: align skill CLI examples by @msaad00 in #2118
• fix: gate SSE proxy policy methods by @msaad00 in #2119
• fix: preserve discovery provenance in exports by @msaad00 in #2120
• fix: surface discovery trust contracts in UI by @msaad00 in #2121
• fix: preserve fleet endpoint identity in graph by @msaad00 in #2122
• feat: add Snowflake operator pull adapter by @msaad00 in #2123
• docs: clarify Helm Postgres deployment contract by @msaad00 in #2124
• feat: gate stale MCP registry status by @msaad00 in #2125
• fix: require auth for remote runtime HTTP by @msaad00 in #2126
• fix: isolate local db scan preference by @msaad00 in #2127
• chore: prepare v0.83.4 release by @msaad00 in #2128

Full Changelog: v0.83.3...v0.83.4

agent-bom v0.83.3

What's Changed

• ci: make MCP registry publish opt-in by @msaad00 in #2114
• fix: package inventory schema in release wheel by @msaad00 in #2115

Full Changelog: v0.83.2...v0.83.3

agent-bom v0.83.2

What's Changed

• ci: harden release gate for 0.83.2 by @msaad00 in #2112

Full Changelog: v0.83.1...v0.83.2

agent-bom v0.82.3

What's Changed

• chore(deps): upgrade pip 25.3 → 26.1 in runtime images (clears CVE-2026-1703) by @msaad00 in #2027
• typing: phase strict mypy onto four more API store modules (#1969) by @msaad00 in #2028
• fix(readme): repair self-hosted mermaid + drop redundant engine-internals image by @msaad00 in #2029
• chore(ui): enable noUncheckedIndexedAccess in tsconfig by @msaad00 in #2030
• typing: phase strict mypy onto four more API store modules (#1969) by @msaad00 in #2031
• docs(compliance): publish per-framework coverage table by @msaad00 in #2032
• chore(ui): enable exactOptionalPropertyTypes — closes #1967 by @msaad00 in #2033
• ops(ci): document + script merge-queue enablement to end stranded CI by @msaad00 in #2034
• feat(helm): KEDA-driven autoscaling on control-plane API + published SLO by @msaad00 in #2035
• ci: scheduled auto-retrigger workflow for stranded PRs by @msaad00 in #2036
• feat(metrics): scan_jobs_active gauge + KEDA queue-depth trigger by @msaad00 in #2037
• feat(perf): clustered Postgres scale evidence harness by @msaad00 in #2038
• docs(deploy): "do I need both images?" — clarify the API-only path by @msaad00 in #2039
• feat: surface graph-walk reachability into BlastRadius scoring + UI by @msaad00 in #2040
• chore(release): v0.82.3 — reachability-aware blast radius, KEDA scaling, Postgres bench by @msaad00 in #2041

Full Changelog: v0.82.2...v0.82.3

agent-bom v0.82.2

What's Changed

• fix(ui-image): pick lightningcss native binding by TARGETARCH (unblocks arm64) by @msaad00 in #2025
• chore(release): v0.82.2 — republish UI image with arm64-correct lightningcss by @msaad00 in #2026

Full Changelog: v0.82.1...v0.82.2