nsauditor-ai 0.2.14 → 0.2.15

package/README.md

@@ -17,7 +17,9 @@ NSAuditor AI is the open-source core of a privacy-first security intelligence pl
 
 ## What's New
 
-**Latest: CE 0.2.14 + Enterprise 0.31.2** (June 2026) — paired content bump for the Enterprise **"At-rest encryption → ISO A.8.24 fleet sweep + cross-cloud KEY-CUSTODY-HOME doctrine"** cycle. The Enterprise engine completes **every AWS at-rest-encryption source** (RDS · S3 · EC2/EBS · SQS/SNS · ElastiCache) to the canonical 7-control at-rest set, fixes the **DynamoDB** + **EC2-indeterminate** class-O false-cleans (an unverifiable encryption posture no longer reads CLEAN), and establishes a **cross-cloud key-custody routing doctrine** — a provider-managed key on an always-encrypted service is a key-management observation (→ **ISO A.8.24**), not an encryption-presence violation, **closing a live PCI 3.5.1 + GDPR Art.32(1)(a) over-claim** on always-encrypted Azure storage. Also fixes a **SOC 2 "no silent data loss"** file-lock mutual-exclusion bug (Enterprise-side). **No new framework, no new plugins (still 28), no coverage-matrix changes** — a mapping-depth + cross-cloud-doctrine release. **No CE engine behavior change** (the depth/doctrine + the lock fix live in the Enterprise engine). Paired **EE 0.31.2** + agent-skill 0.2.14. **EE 0.31.2 requires CE 0.2.8+.** See [CHANGELOG.md](./CHANGELOG.md).
+**Latest: CE 0.2.15 + Enterprise 0.31.3** (June 2026) — paired content bump for the Enterprise **"Enumeration-failure fleet sweep (no-silent-false-clean) + Aurora DB-cluster snapshot dimension"** cycle. The Enterprise engine closes a fleet-wide class of **enumeration-failure** false-cleans across **12 AWS plugins** — a scanner that cannot enumerate a resource population now fails **CLOSED** with a routed evidence-gap instead of reading CLEAN — and adds the Aurora **DB-cluster snapshot** dimension to plugin 1140 (a public `restore=all` cluster snapshot is CRITICAL, an unencrypted one HIGH; the cluster surface instance-level scans never see), with a Multi-AZ DB cluster fail-close. **No new framework, no new plugins (still 28), no coverage-matrix changes** — a false-negative-hardening release. **No CE engine behavior change** (the detection + routing live in the Enterprise engine). Paired **EE 0.31.3** + agent-skill 0.2.15. **EE 0.31.3 requires CE 0.2.8+.** See [CHANGELOG.md](./CHANGELOG.md).
+
+**Prior: CE 0.2.14 + Enterprise 0.31.2** (June 2026) — paired content bump for the Enterprise "At-rest encryption → ISO A.8.24 fleet sweep + cross-cloud KEY-CUSTODY-HOME doctrine" cycle (every AWS at-rest source → the 7-control at-rest set; DynamoDB + EC2-indeterminate class-O false-cleans fixed; cross-cloud key-custody doctrine → ISO A.8.24; SOC 2 file-lock fix). See [CHANGELOG.md](./CHANGELOG.md).
 
 **Prior: CE 0.2.13 + Enterprise 0.30.1** — paired content bump for the Enterprise "AWS RDS + API Gateway false-negative depth pass + AXIS_MAP graduation" cycle (RDS snapshot-sharing CRITICAL even when encrypted · API Gateway WAF deep-audit gap arm; every AWS source now false-negative-passed). See [CHANGELOG.md](./CHANGELOG.md).
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nsauditor-ai",
-  "version": "0.2.14",
+  "version": "0.2.15",
   "description": "Modular AI-assisted network security audit platform — Community Edition",
   "type": "module",
   "private": false,