Changelog

0.1.0 - 2026-09-01

Added byte-signature inventory, claimed-vs-detected media types, safe names, SHA-256 hashes, and bounded batches.
Added project-owned JPEG, PNG, WebP, EXIF/TIFF, IPTC, and XMP scanners with explicit structural and decompression limits.
Added ExifReader as a second scanner and best-effort inspect-only coverage for TIFF, HEIC/HEIF, AVIF, and JPEG XL.
Added categorized metadata findings, coverage and warning reports, including selected colour-profile, thumbnail, trailing-data, MPF, JUMBF, and C2PA indicators.
Added orientation-normalized pixel re-encoding for supported static JPEG, PNG, and WebP images, followed by mandatory output hashing, independent re-scan, dimension/orientation checks, and a bounded pixel-sample comparison.
Added individual outputs, deterministic JSON reports, bounded batch ZIPs, cancellation, Toolbox shell integration, offline static packaging, and explicit no-anonymity boundaries.
Added generated format/adversarial fixtures, unit gates, and Chromium/Firefox nested-path and no-network browser gates.