Status: v0.4 release baseline
- README exists.
- SPEC exists.
- Blast-radius audit exists.
- Verification plan exists.
- Automated verifier passes.
- Scanner does not print secret-bearing fixture contents.
- Markdown and JSON reports are generated.
- HTML and SARIF reports are generated.
- JSON report schema is documented.
- Self-scan excludes fixtures and generated reports by default.
- Rule-pack behavior is covered by verification.
- GitHub Action metadata exists.
- Action entrypoint is locally verified.
- release package boundary is verified from a generated ZIP.
- Extracted release package can run the verifier.
- Product copy does not claim security, compliance, vulnerability scanning, or production readiness.
- No external services or dependencies are required.