audit-labs/evidence-seal

 1# Changelog
 2
 3All notable changes to this project are documented here. The format is based on
 4[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres
 5to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 6
 7## [1.0.0] - 2026-08-07
 8
 9First stable release. The `manifest.json` schema (`manifest_version`) and the CLI
10exit codes are now a committed contract: neither changes in a breaking way without
11a major-version bump.
12
13## [0.1.0] - 2026-08-06
14
15### Added
16
17- Tamper-evident seals and chain of custody: streaming SHA-256 with a path-bound
18  Merkle root over a directory, written to a canonical `manifest.json`.
19- Append-only seal chains via `previous`, with the `ignore` globs stored so
20  `verify` reuses them.
21- Optional ed25519 signing (`[sign]` extra) and RFC 3161 timestamping
22  (`[timestamp]` extra), including full TSA-signature verification with `--tsa-cert`.
23- CLI subcommands `seal`, `verify`, `chain`, `keygen`, `sign`; exit codes
24  0 (intact), 1 (tamper / broken / invalid signature), 2 (usage).
25- PyPI trusted-publishing release workflow.
26
27[1.0.0]: https://github.com/audit-labs/evidence-seal/releases/tag/v1.0.0
28[0.1.0]: https://github.com/audit-labs/evidence-seal/releases/tag/v0.1.0