# Changelog

## 0.2.0 - 2026-09-02

- Added reusable selective-removal profiles and pseudonymized per-file policy evidence across supported and inspect-only formats.
- Distinguished verified full re-encoding, available re-encoding, inspect-only input, and non-executable selective-preservation requests; added Toolbox I/O/capability metadata.

## 0.1.0 - 2026-09-01

- Added byte-signature inventory, claimed-vs-detected media types, safe names,
  SHA-256 hashes, and bounded batches.
- Added project-owned JPEG, PNG, WebP, EXIF/TIFF, IPTC, and XMP scanners with
  explicit structural and decompression limits.
- Added ExifReader as a second scanner and best-effort inspect-only coverage for
  TIFF, HEIC/HEIF, AVIF, and JPEG XL.
- Added categorized metadata findings, coverage and warning reports, including
  selected colour-profile, thumbnail, trailing-data, MPF, JUMBF, and C2PA
  indicators.
- Added orientation-normalized pixel re-encoding for supported static JPEG, PNG,
  and WebP images, followed by mandatory output hashing, independent re-scan,
  dimension/orientation checks, and a bounded pixel-sample comparison.
- Added individual outputs, deterministic JSON reports, bounded batch ZIPs,
  cancellation, Toolbox shell integration, offline static packaging, and
  explicit no-anonymity boundaries.
- Added generated format/adversarial fixtures, unit gates, and Chromium/Firefox
  nested-path and no-network browser gates.