Riksdagsmonitor v0.9.20

What's Changed

📚 Documentation

• Harden analysis-gate + renderer against BLUF-leak and duplicate-card title regressions @copilot-swe-agent[bot] (#2530)
• Enforce English-only analysis artifacts; render non-EN via executive-brief cascade @copilot-swe-agent[bot] (#2529)

🧪 Testing

• Harden analysis-gate + renderer against BLUF-leak and duplicate-card title regressions @copilot-swe-agent[bot] (#2530)
• Enforce English-only analysis artifacts; render non-EN via executive-brief cascade @copilot-swe-agent[bot] (#2529)
• Drop SEO boilerplate; use executive-brief H1/BLUF verbatim @copilot-swe-agent[bot] (#2527)

🌐 Internationalization

• 📰 Executive Brief Translations — 2026-05-14..2026-05-16 @github-actions[bot] (#2531)
• Harden analysis-gate + renderer against BLUF-leak and duplicate-card title regressions @copilot-swe-agent[bot] (#2530)
• Enforce English-only analysis artifacts; render non-EN via executive-brief cascade @copilot-swe-agent[bot] (#2529)
• 📰 Executive Brief Translations — 2026-05-16 @github-actions[bot] (#2528)
• Drop SEO boilerplate; use executive-brief H1/BLUF verbatim @copilot-swe-agent[bot] (#2527)

🔧 Maintenance

• Enforce English-only analysis artifacts; render non-EN via executive-brief cascade @copilot-swe-agent[bot] (#2529)

📦 npm Package

Shared types, theme system, and dashboard utilities are available as an npm package with provenance:

npm install riksdagsmonitor

import {
  DARK_THEME_COLORS, LIGHT_THEME_COLORS,
  getActiveThemeColors, getPartyColor,
  CHART_PALETTE, BREAKPOINTS,
} from 'riksdagsmonitor';

📊 Release Metrics & Evidence

All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.

🔐 Security & Supply Chain Protection

This release includes:

• ✅ SLSA Build Provenance Attestations - Cryptographically signed build provenance
• ✅ Software Bill of Materials (SBOM) - Complete dependency inventory in SPDX format
• ✅ SHA-256 Checksums - All artifacts include checksums for integrity verification
• ✅ npm Provenance - npm package published with verified provenance attestation
• ✅ CodeQL Security Scanning - Automated vulnerability detection
• ✅ Dependency Scanning - Continuous vulnerability monitoring with Dependabot

Verify attestations:

gh attestation verify riksdagsmonitor-0.9.20.zip -R Hack23/riksdagsmonitor
npm audit signatures

Browse attestations: View all attestations

📋 ISMS Compliance & Policies

Compliance Frameworks

Riksdagsmonitor follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.

🏗️ Architecture Documentation

Current State	Future State
Architecture	Future Architecture
Security Architecture	Future Security
Threat Model	Future Threat Model
Data Model	Future Data Model
Flowchart	Future Flowchart
State Diagram	Future State Diagram
Mindmap	Future Mindmap
SWOT	Future SWOT

📦 Release Artifacts

Artifact	Description	Verification
riksdagsmonitor-0.9.20.zip	Production build	SHA-256 checksum, SLSA attestation
riksdagsmonitor-0.9.20.zip.sha256	SHA-256 checksum	Compare with sha256sum
riksdagsmonitor-0.9.20.spdx.json	SBOM (SPDX format)	SBOM attestation
*.intoto.jsonl	SLSA attestations	gh attestation verify
riksdagsmonitor (npm)	npm package	npm audit signatures

🚀 Deployment

• Primary: https://riksdagsmonitor.com (AWS S3/CloudFront)
• Backup: GitHub Pages
• Documentation: https://riksdagsmonitor.com/docs/
• API Docs: https://riksdagsmonitor.com/docs/api/
• npm Package: https://www.npmjs.com/package/riksdagsmonitor
• Status:

🌐 Hack23 Ecosystem

Platform	Live Site	API Docs	Repository
Riksdagsmonitor	riksdagsmonitor.com	API	GitHub
EU Parliament MCP	euparliamentmonitor.com	API	GitHub
CIA Compliance Manager	ciacompliancemanager.com	API	GitHub
Black Trigram	blacktrigram.com	API	GitHub
CIA Platform	—	—	GitHub
ISMS Public	—	—	GitHub

🏗️ Built With

• Node.js: 26.x
• Vite: 8.x
• Chart.js: 4.5.x
• D3.js: 7.9.x
• Vitest: 4.x
• Cypress: 15.x
• TypeScript: 6.x

👥 Contributors

@Copilot, @github-actions[bot], @pethers, copilot-swe-agent[bot], github-actions[bot] and copilot

Full Changelog: v0.9.19...0.9.20

📦 Release Artifacts

• riksdagsmonitor-v0.9.20.zip - Production build
• riksdagsmonitor-v0.9.20.zip.sha256 - Checksum for verification
• riksdagsmonitor-v0.9.20.spdx.json - SBOM (Software Bill of Materials)
• *.intoto.jsonl - SLSA Build Provenance Attestations

📦 npm Package

Shared types, theme system, and utilities are available as an npm package:

npm install riksdagsmonitor

📚 Documentation

• API Documentation
• Test Coverage Report
• E2E Test Reports
• Documentation Hub

🔐 Security

All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify attestations using the GitHub CLI:

gh attestation verify riksdagsmonitor-v0.9.20.zip -R Hack23/riksdagsmonitor