Changelog

All notable changes to this project are documented in this file.

v0.4.3 - 2026-07-12

feat: add summary <scan.json> so saved scan artifacts can produce an executive security summary without rescanning
feat: add diff <baseline.json> <current.json> for direct comparison of saved scan payloads
feat: add saved-artifact severity gating via summary --fail-on <severity>
fix: stop forcing all Bankr analysis traffic through Anthropic-prefixed models and preload a frontier-capable multi-provider default set
test: cover scan-payload summarization and reporting helpers

feat: add monitor add|list|scan commands for multi-repo fleet monitoring
feat: persist fleet registry, last fleet scan, and deduped threat memory under .threat-lab/
feat: build cross-repo dependency exposure maps so shared package blast radius is visible
feat: track package-level threat sightings across scans with first-seen / last-seen / repo exposure state
docs: add fleet monitor usage and persistent threat-state documentation

feat: export unified scan results as SARIF 2.1.0 for GitHub code scanning and CI security pipelines
feat: add a reusable composite GitHub Action wrapper via action.yml
fix: auto-create nested output directories for scan --output targets
docs: add wrapper usage, SARIF workflow examples, and version-pinned action guidance
chore: align package metadata / lockfile versioning for the new release

feat: add watch <path> monitor mode with interval-based rescans, diffing, snapshot output, and escalation alerts
feat: reuse project-level dependency audit + threat-intel passes across all scanned Solidity files for faster unified scans
feat: correlate live threat intel against declared project dependencies and dependency-audit signals before escalating alerts
feat: add structured security-gate summaries for scan --fail-on <severity> with per-category counts
fix: suppress duplicate structured findings and duplicate watch alerts in monitor cycles
fix: downgrade weak, uncorrelated exploit chatter so reports stop over-warning on background noise
docs: refresh README around unified scan/watch workflows and current package positioning
test: expand scanner coverage for watch mode, correlated intel, weak-signal suppression, and gate summaries

feat: add scan --compare <baseline.json> report diffing for saved scan artifacts
feat: add scan --fail-on <severity> security gates for CI/release enforcement
test: cover scan diffing and severity-threshold helpers
docs: document baseline comparisons and security-gate usage

feat: first polished npm/GitHub release pass for Threat Lab
feat: ships unified scan/audit/run/library CLI flow for exploit research and pattern capture
feat: includes real Solidity scenario contracts, pattern library plumbing, and multi-model analysis integration
docs: adds release changelog and refreshes package metadata for publish readiness