Skip to content

Changelog

All notable changes to Wardline are documented here.

This project adheres to Semantic Versioning and follows the Keep a Changelog format.


Unreleased

Added

  • Java language binding specification (Part II-B)
  • Supplementary rule groups: SCN-021 (contradictory decorator detection), SCN-022 (field-completeness verification), SUP-001 (supplementary decorator contracts)
  • Governance retention requirements documentation with CI artefact configuration
  • Obligation-ledger conformance model replacing release-only conformance matrix
  • Bounded Assurance Review (BAR) system for evidence-based compliance verification
  • wardline regime status and wardline regime verify governance health commands
  • wardline report overview static report generation (Markdown, HTML, JSON)
  • wardline corpus publish conformance status generation from corpus + self-hosting SARIF
  • Restoration boundaries (@restoration_boundary) with evidence-bounded tier restoration
  • @data_flow advisory decorator (Group 16) for parameterised data-flow intent
  • Exception drift detection: preview-drift and migrate commands for L3 taint migration
  • Manifest delegation system for per-path exception authority in monorepos
  • Overlay validation_scope and contract_bindings for boundary contract verification
  • Analysis levels guide (L1/L2/L3 comparison and choosing guide)
  • Governance profiles guide (lite vs assurance migration path)

Changed

  • SARIF output expanded with 30+ run-level properties including governance events, conformance gaps, control law state, and coverage metrics
  • Expanded severity matrix to 72 cells (9 rules × 8 taint states)
  • Coherence checks expanded to 14 checks covering tier topology, contracts, and restoration evidence
  • Exception register now tracks recurrence_count, governance_path, and analysis_level

Fixed

  • Taint join commutativity for MIXED_RAW edge cases
  • Deterministic SARIF output in --verification-mode (no timestamps, stable ordering)

0.3.0 — 2026-04-12

Added

  • Full Python language binding (Part II-A) with 38 decorators across 17 groups
  • Nine canonical pattern rules (PY-WL-001 through PY-WL-009)
  • Three-phase taint propagation engine (variable → function → callgraph)
  • SARIF v2.1.0 output for CI integration
  • Exception governance with control-law state machine
  • Manifest format with overlay support for monorepos
  • Runtime enforcement via descriptor-based boundary checks
  • Golden corpus with 150+ specimens for verification
  • Self-hosting: Wardline scans its own codebase

Changed

  • Authority tier model refined to four tiers (INTEGRAL, ASSURED, GUARDED, EXTERNAL_RAW)
  • Taint state vocabulary expanded to 8 canonical states

Security

  • Added fail-closed semantics for validation boundaries
  • Scanner resilience: parse errors skip file, rule crashes emit TOOL-ERROR

0.2.0 — 2026-02-15

Added

  • Initial specification draft (Part I chapters 1–10)
  • Prototype scanner with PY-WL-001, PY-WL-003, PY-WL-004
  • Basic manifest format

Changed

  • Renamed "security zones" to "authority tiers"

0.1.0 — 2026-01-10

Added

  • Project inception
  • Core concept: semantic boundary enforcement for Python
  • Initial decorator library proof-of-concept