Minor, not patch: `websec init --claimspec` is new public CLI surface, and the README's release section states that in the 0.x series a feature addition increments the minor version. Contents, all already on main since v0.18.0: - feat(claimspec): the `ignore` kind writer (#157) - fix(detectors): the substance of #142 and #143, with controls (#155) - fix(detectors): #128 and #143 with the controls they were missing (#154) - the calibration table's prose contradicted its own counts - docs: technical brief + GitHub Pages (#153, #156), spec 002 public evidence and three README corrections (#158) The migration note calls out the one thing a CI author should expect: FEWER findings, because four false-positive sources are fixed. Each ships with the paired true-positive control, so it is a precision gain rather than a coverage loss. tests/test_explained_brief.py: the brief's release-count assertion counted every changelog heading and compared it to a literal 28 -- the running total. The brief is a snapshot of STATED_VERSION and says so on its own last page, so that pin failed on every release while proving nothing extra: a brief cannot overstate a release that shipped after it was written. It now counts releases at-or-before STATED_VERSION. The equality and the prose check both remain, so a brief that overstates what existed at its own version still fails. The original loose regex is kept as the counting basis -- a three-component regex drops the grouped `## [0.2.x]` heading and yields 27. Logged as bug-339. Deliberately NOT done here: the brief still reads v0.18.0. Bumping its masthead means re-stating the release count, moving the cadence figure's last point and regenerating the PDF -- a design pass on a published artifact, not release mechanics. Verified: 1579 tests OK (skipped=2); docguard guard exit unchanged from baseline; docguard specs --check clean. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Commits

Commits on Sep 22, 2026

release: v0.19.0