nsauditor-ai 0.2.12 → 0.2.13

package/README.md

@@ -17,7 +17,9 @@ NSAuditor AI is the open-source core of a privacy-first security intelligence pl
 
 ## What's New
 
-**Latest: CE 0.2.12 + Enterprise 0.30.0** (June 2026) — paired content bump for the Enterprise **"AWS + Azure false-negative depth-pass + cross-source/cross-vector compliance-mapping parity"** cycle. The Enterprise engine closes a wave of cloud-misconfiguration false-negatives (S3 access-point public-exposure · resource-policy effective-exposure on Lambda/DynamoDB/SQS-SNS/VPC-endpoints/Secrets/API-Gateway · EC2-SG public-vs-private-CIDR + split-range · KMS effective-decrypt + cross-account key-policy · IAM ListUsers truncation · Azure storage/NSG/Key-Vault/cloud-scanner class-O fail-opens) and makes the compliance verdict **consistent across all seven frameworks** (architecturally-identical confidentiality / least-privilege exposures now route to the same controls — incl. a public application entry-point now appearing on a NIST CSF **PR.AA-05** least-privilege report). **No new framework, no new plugins (still 28), no coverage-matrix changes** — a detection-depth + mapping-correctness release. **No CE engine behavior change** (the depth/parity lives in the Enterprise engine). Paired **EE 0.30.0** + agent-skill 0.2.12. **EE 0.30.0 requires CE 0.2.8+.** See [CHANGELOG.md](./CHANGELOG.md).
+**Latest: CE 0.2.13 + Enterprise 0.30.1** (June 2026) — paired content bump for the Enterprise **"AWS RDS + API Gateway false-negative depth pass + AXIS_MAP graduation"** cycle. The Enterprise engine closes the last two AWS sources' silent false-cleans — **RDS (1140)** snapshot-sharing exposure (a `restore=all` shared snapshot is CRITICAL **even when encrypted**) + a `DescribeDBInstances` evidence-gap, and **API Gateway (1050)** WAF deep-audit gap-arm + unknown-auth + deleted-WebACL routing — and **graduates both to AXIS_MAP**, so every AWS source now has a dedicated false-negative pass. Cross-framework parity folds route the API Gateway resource-policy public-grant to **PCI 7.2.1 + GDPR Art.32(1)(b)** and the unencrypted cache to **ISO A.8.24**. **No new framework, no new plugins (still 28), no coverage-matrix changes** — a detection-depth + mapping-correctness release. **No CE engine behavior change** (the depth/parity lives in the Enterprise engine). Paired **EE 0.30.1** + agent-skill 0.2.13. **EE 0.30.1 requires CE 0.2.8+.** See [CHANGELOG.md](./CHANGELOG.md).
+
+**Prior: CE 0.2.12 + Enterprise 0.30.0** — paired content bump for the Enterprise AWS + Azure false-negative depth-pass + cross-source/cross-vector compliance-mapping parity cycle (S3 access-points · resource-policy effective-exposure · EC2-SG · KMS effective-decrypt · Azure class-O fail-opens · seven-framework routing parity). See [CHANGELOG.md](./CHANGELOG.md).
 
 **Prior: CE 0.2.11 + Enterprise 0.20.0** — paired content bump for the Enterprise **GDPR Article 32 (Security of Processing)** cycle, the seventh compliance framework (Art. 32 infrastructure substrate only, not GDPR compliance; the MCP `scan_cloud` description lists GDPR Art. 32; the agent-skill teaches it; no CE engine change). See [CHANGELOG.md](./CHANGELOG.md).
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nsauditor-ai",
-  "version": "0.2.12",
+  "version": "0.2.13",
   "description": "Modular AI-assisted network security audit platform — Community Edition",
   "type": "module",
   "private": false,