Changelog¶
All notable changes to Wardline are documented here.
This project adheres to Semantic Versioning and follows the Keep a Changelog format.
Unreleased¶
Added¶
- Java language binding specification (Part II-B)
- Supplementary rule groups: SCN-021 (contradictory decorator detection), SCN-022 (field-completeness verification), SUP-001 (supplementary decorator contracts)
- Governance retention requirements documentation with CI artefact configuration
- Obligation-ledger conformance model replacing release-only conformance matrix
- Bounded Assurance Review (BAR) system for evidence-based compliance verification
wardline regime statusandwardline regime verifygovernance health commandswardline report overviewstatic report generation (Markdown, HTML, JSON)wardline corpus publishconformance status generation from corpus + self-hosting SARIF- Restoration boundaries (
@restoration_boundary) with evidence-bounded tier restoration @data_flowadvisory decorator (Group 16) for parameterised data-flow intent- Exception drift detection:
preview-driftandmigratecommands for L3 taint migration - Manifest delegation system for per-path exception authority in monorepos
- Overlay
validation_scopeandcontract_bindingsfor boundary contract verification - Analysis levels guide (L1/L2/L3 comparison and choosing guide)
- Governance profiles guide (lite vs assurance migration path)
Changed¶
- SARIF output expanded with 30+ run-level properties including governance events, conformance gaps, control law state, and coverage metrics
- Expanded severity matrix to 72 cells (9 rules × 8 taint states)
- Coherence checks expanded to 14 checks covering tier topology, contracts, and restoration evidence
- Exception register now tracks
recurrence_count,governance_path, andanalysis_level
Fixed¶
- Taint join commutativity for MIXED_RAW edge cases
- Deterministic SARIF output in
--verification-mode(no timestamps, stable ordering)
0.3.0 — 2026-04-12¶
Added¶
- Full Python language binding (Part II-A) with 38 decorators across 17 groups
- Nine canonical pattern rules (PY-WL-001 through PY-WL-009)
- Three-phase taint propagation engine (variable → function → callgraph)
- SARIF v2.1.0 output for CI integration
- Exception governance with control-law state machine
- Manifest format with overlay support for monorepos
- Runtime enforcement via descriptor-based boundary checks
- Golden corpus with 150+ specimens for verification
- Self-hosting: Wardline scans its own codebase
Changed¶
- Authority tier model refined to four tiers (INTEGRAL, ASSURED, GUARDED, EXTERNAL_RAW)
- Taint state vocabulary expanded to 8 canonical states
Security¶
- Added fail-closed semantics for validation boundaries
- Scanner resilience: parse errors skip file, rule crashes emit TOOL-ERROR
0.2.0 — 2026-02-15¶
Added¶
- Initial specification draft (Part I chapters 1–10)
- Prototype scanner with PY-WL-001, PY-WL-003, PY-WL-004
- Basic manifest format
Changed¶
- Renamed "security zones" to "authority tiers"
0.1.0 — 2026-01-10¶
Added¶
- Project inception
- Core concept: semantic boundary enforcement for Python
- Initial decorator library proof-of-concept