v0.3.15

What's Changed

• feat(protect): per-site Pulse rules client (fetch rules by site UUID) by @devlob in #62

Full Changelog: v0.3.14...v0.3.15

v0.3.14

What's Changed

• feat(protect): scaffold response screening + first scaffolder tests by @patchstackdave in #70
• [feat] field-test: cover the "npm view is code execution" Lovable refusal by @mariojgt in #71
• [feat] surface remaining setup steps after scan + consistent guide labels by @mariojgt in #72

Full Changelog: v0.3.12...v0.3.14

v0.3.13

Per-site Pulse WAF rules: the guard fetches this site's rules by site UUID from GET /monitor/pulse/rules/<uuid> (in-memory TTL cache + last-known-good disk cache, fail-open), with source precedence siteUuid → token → bundled. bakeSiteUuid validates UUID format before baking.

Cut from PR #62 (pulse-per-site-rules-connect, main merged in — supersets v0.3.12; not yet merged to main). Validates the saas #999 per-site rules endpoint end-to-end.

v0.3.12

What's Changed

• feat(protect): comprehensive demo/test rule gallery + pack-safety guard by @patchstackdave in #66
• [feat] remove llms.txt provenance citation; add lovable-supplychain field-test persona by @mariojgt in #69

Full Changelog: v0.3.11...v0.3.12

v0.3.11

What's Changed

• feat(protect): opt-in response screening for node/express + Supabase guard by @patchstackdave in #64
• Remove install.txt references; add Uninstalling section to AGENT-INSTALL.md by @ejntaylor in #68

Full Changelog: v0.3.10...v0.3.11

v0.3.10

What's Changed

• Add real-platform personas and a personas × models field-test matrix by @ejntaylor in #60
• docs(protect): end-to-end demo + seed demo rules (public CVE) by @patchstackdave in #61
• Harden install prompt against read-then-apply refusals (bolt.diy report) by @ejntaylor in #63
• Verify-first install prompt + hostinger persona and two-turn confirm mode by @ejntaylor in #67

Full Changelog: v0.3.9...v0.3.10

v0.3.9

What's Changed

• feat(protect): rule-driven Tier-3 (response redaction + egress SSRF) + array-param fix by @patchstackdave in #57
• test(protect): port engine unit suite + restructure tests/protect/ by @patchstackdave in #58
• [feat] 49 - automate disclosure widget installation by @mariojgt in #59

New Contributors

• @patchstackdave made their first contribution in #57

Full Changelog: v0.3.8...v0.3.9

v0.3.8

What's Changed

• Add MAINTAINING.md — a guide for editing the install prompt and setup docs by @ejntaylor in #54
• Fix Release to Publish cascade so releases actually publish to npm by @ejntaylor in #55
• Harden Release versioning against lagging publishes and tag collisions by @ejntaylor in #56

Full Changelog: v0.3.7...v0.3.8

v0.3.7

What's Changed

• Add one-click Release workflow and surface publishes as GitHub deployments by @ejntaylor in #53

Full Changelog: v0.3.6...v0.3.7

v0.3.6

Bump version from 0.2.11 to 0.3.6 (#52)