What's new in v1.1.0
New inputs & outputs
guard-scaninput: opt-in pre-flight that runszenzic guard scanbefore the main quality gate.cap-exceededoutput: exposes suppression-cap failures as a structured output for downstream workflow conditions.- Sovereign Job Summary output for every critical non-zero exit code (exits 2 and 3).
Runtime governance
- Wrapper now executes score governance checks (stamp + freshness) after
check all. - ADR-037 alignment:
release_namein.zenzic.tomlenforced as semantic version. - ADR-089 alignment: all GitHub Actions dependencies pinned to immutable SHA-40.
Security
- Exits 2 and 3 are explicitly documented as non-suppressible at the action boundary.
- Forwarding contract for security-related runtime flags enforced end-to-end.
- Inherited additive
brand_obsolescencemerge semantics from core.
Core pin
- Pinned to zenzic core v0.9.0.
Full changelog: CHANGELOG.md