Release 0.4.0 — MIRRA continuity metadata + MVAR security hardening baseline

- Bump version 0.3.0 → 0.4.0 across pyproject.toml and __init__.py
- Add comprehensive CHANGELOG documenting:
  - Enforcement-strength test surfaces (policy matrix, witness integrity, OWASP ASI-2026, EU AI Act, adversarial evasion, adapter matrix, cross-session isolation, SARIF export, engine parity, fuzzing)
  - Compliance attestation CLI (clawzero compliance verify with signed output)
  - SARIF official schema validation contracts
  - Integration with post-PR81–PR86 MVAR hardening baseline:
    * Ed25519 default signing with truthful algorithm labeling
    * Vault-mediated credential execution path
    * Cryptographic policy lineage enforcement
    * Advanced risk scoring in default execution path
    * Taint-laundering prevention integration proofs
    * Machine-readable architecture registry
- Full suite validation: 9598 passed, 17 skipped (gap markers), 0 failed
- Ready for PyPI: pip install clawzero==0.4.0

Author: Sdvegas21

CHANGELOG.md

@@ -2,6 +2,64 @@
 
 All notable changes to ClawZero are documented in this file.
 
+## [0.4.0] - 2026-04-16
+
+### Added
+
+- Added enforcement-strength generated test surfaces and audit artifacts on top of `v0.3.0`, including:
+  - policy matrix, witness integrity, OWASP ASI-2026, EU AI Act, adversarial evasion, adapter matrix, cross-session isolation, SARIF export, engine parity, and fuzzing suites added across commits `ac2ebd6` through `d32190a`.
+  - documented audit baseline and authoring standard in:
+    - `docs/test-suite-audit-summary.md`
+    - `docs/test-authoring-guide.md`
+- Added compliance attestation CLI surface in `clawzero compliance verify` (commit `6776cdf`; hardened in later commits), including signed attestation payload output and suite presence checks.
+- Added official SARIF schema validation contracts (`tests/exports/test_sarif_official_schema_contract.py`, commit `db4db6e`).
+
+### Security Hardening (Post-PR81–PR86 MVAR Baseline)
+
+- Integrated and validated against the post-PR81–PR86 MVAR hardening baseline (`52f2038`, `6fbbb89`, `174beee`, `7513c7f`, `3f53bc7`, `a9a1dfd`) used in this workspace:
+  - Ed25519 default signing with truthful algorithm labeling (`ed25519` vs `hmac-sha256`), removing algorithm-label misrepresentation in audit output.
+  - Vault-mediated credential execution path for `credentials.access`, with token-reference mediation and no raw credential material returned to the agent path.
+  - Cryptographic policy lineage enforcement with lineage-chain verification and fail-closed behavior in `prod_locked`.
+  - Advanced risk scoring in the default execution path with profile-aware modes (`BLOCKING` in `prod_locked`) and counterfactual injection signals.
+  - Taint-laundering prevention integration proofs covering single-hop/multi-hop propagation, trust-boundary crossing, source fragmentation, and Claim-18-style provenance differential behavior (`mvar/tests/integration/test_taint_laundering_prevention.py`).
+  - Machine-readable architecture registry with signed runtime self-report, layer status, and compatibility matrix (`mvar/mvar-core/architecture.py`).
+
+### Validation
+
+- Full ClawZero suite green on this release line:
+  - `9598 passed`
+  - `17 skipped` (intentional gap markers)
+  - `0 failed`
+  - `9615 collected`
+- PyPI: `pip install clawzero==0.4.0`
+- GitHub: github.com/mvar-security/clawzero
+
+## [0.3.0] - 2026-04-11
+
+### Added
+
+- Added session-level chain detection runtime and session/wrap CLI paths (`f0f48ee`).
+- Added key visibility support in CLI and release-aligned witness UX (`f0f48ee`, `926b49a`).
+
+### Changed
+
+- Stabilized CI ordering and SARIF generation lanes for attack-pack workflows (`ddc5aa9`, `efa43bc`, `2ddea65`, `fe10d1f`).
+- Narrowed compliance signing key typing for mypy correctness (`54dd1c0`).
+
+## [0.2.1] - 2026-04-09
+
+### Added
+
+- Added MCP adapter alpha support and strengthened proof UX in release artifacts (`f31e015`).
+- Upgraded witness-signing flow and associated demo/proof ergonomics (`f31e015`).
+
+## [0.2.0] - 2026-03-31
+
+### Added
+
+- Added `protect_agent()` API and the v0.2 framework adapter expansion for LangChain, CrewAI, AutoGen, OpenClaw, and MCP integration surfaces (`99477fe`).
+- Added expanded attack corpus coverage and release-proof packaging for the 0.2 line (`99477fe`, `ff5a102`).
+
 ## [0.1.5] - 2026-03-18
 
 ### Added

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "clawzero"
-version = "0.3.0"
+version = "0.4.0"
 description = "Deterministic execution boundary for AI agents"
 readme = "README.md"
 requires-python = ">=3.10"

src/clawzero/__init__.py

@@ -4,7 +4,7 @@
 Deterministic execution boundary between model output and tool execution.
 """
 
-__version__ = "0.3.0"
+__version__ = "0.4.0"
 __author__ = "MVAR Security"
 __license__ = "Apache-2.0"