Changelog

0.2.0 - 2026-09-02

Added reusable selective-removal profiles and pseudonymized per-file policy evidence across supported and inspect-only formats.
Distinguished verified full re-encoding, available re-encoding, inspect-only input, and non-executable selective-preservation requests; added Toolbox I/O/capability metadata.

Added byte-signature inventory, claimed-vs-detected media types, safe names, SHA-256 hashes, and bounded batches.
Added project-owned JPEG, PNG, WebP, EXIF/TIFF, IPTC, and XMP scanners with explicit structural and decompression limits.
Added ExifReader as a second scanner and best-effort inspect-only coverage for TIFF, HEIC/HEIF, AVIF, and JPEG XL.
Added categorized metadata findings, coverage and warning reports, including selected colour-profile, thumbnail, trailing-data, MPF, JUMBF, and C2PA indicators.
Added orientation-normalized pixel re-encoding for supported static JPEG, PNG, and WebP images, followed by mandatory output hashing, independent re-scan, dimension/orientation checks, and a bounded pixel-sample comparison.
Added individual outputs, deterministic JSON reports, bounded batch ZIPs, cancellation, Toolbox shell integration, offline static packaging, and explicit no-anonymity boundaries.
Added generated format/adversarial fixtures, unit gates, and Chromium/Firefox nested-path and no-network browser gates.