nsauditor-ai 0.2.4 → 0.2.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -17,7 +17,7 @@ NSAuditor AI is the open-source core of a privacy-first security intelligence pl
|
|
|
17
17
|
|
|
18
18
|
## What's New
|
|
19
19
|
|
|
20
|
-
**Latest: CE 0.2.
|
|
20
|
+
**Latest: CE 0.2.5 + Enterprise 0.19.0** (June 2026) — paired pin for **EE 0.19.0** "No silent false-clean": the largest false-clean-class closure since the framework cycles — an un-scanned cloud region, a denied API call, or a logging-but-not-delivering trail can no longer read CLEAN at either the compliance verdict or the MCP transport. The shared `forEachRegion` now emits a per-region evidence-gap for every errored/access-denied AWS region (with class-O routing that fail-closes exactly that source's native attested controls across all six frameworks), plus four swallow→gap retrofits (1150 SQS/SNS, 1022 Azure storage, 1200 GuardDuty, 1040 CloudTrail delivery-failure). It also fixes two air-gapped/IAM criticals from the Mythos architecture review (the offline CVE matcher now fails-closed on distro/epoch/build-suffixed package versions; plugin 1110 keeps HIGH on the AWS-default root-delegation KMS key policy) and stops the AI-enrichment prompt from leaking the scan target (public IP/hostname/MAC/secrets) to the external LLM. Plugin count UNCHANGED at 28; all six coverage matrices UNCHANGED; CE has no code change (paired pin).
|
|
21
21
|
|
|
22
22
|
→ Full release history: **[CHANGELOG.md](./CHANGELOG.md)**
|
|
23
23
|
→ See a sample EE scan output: **[walk-through with synthetic Acme Corp AWS account](https://www.nsauditor.com/ai/docs/sample-scan/)** (no signup required)
|