Changelog
- 3880176 ci: bump the ci-actions group with 2 updates (#358)
- adf3e37 deps: bump modernc.org/sqlite from 1.48.0 to 1.48.1 in the go-deps group (#357)
- 3870e10 feat: add action receipts with Ed25519 signing and verify-receipt CLI (#351)
- 8c6adc6 feat: hash-chained receipts and transcript roots (#354)
- 8d8eefb feat: immutable core scanner and bundle metadata v2 (#359)
- 44f1177 feat: onboarding stack (init CLI, README, Helm chart, FP guide) (#355)
- f6f562d feat: runtime hardening (airlock, browser shield, posture capsule) (#356)
- bdab6f7 fix: receipt emission for TLS interception, field-level redaction, and hot-reload lifecycle (#362)
- d37166f fix: respect pipelock:ignore inline comments in scan-diff mode (#365)
- 4c47d1e fix: runtime hardening follow-up — review findings and tracked issues (#371)
- 2e45ac4 fix: scan all multipart part bodies, headers, and transfer encodings (#370)