nsauditor-ai 0.2.49 → 0.2.50
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -17,6 +17,20 @@ NSAuditor AI is the open-source core of a privacy-first security intelligence pl
|
|
|
17
17
|
|
|
18
18
|
## What's New
|
|
19
19
|
|
|
20
|
+
**A provider badge you can trust, and an evidence gap that never tells an auditor what to type (CE 0.2.50 / Enterprise 0.43.0).**
|
|
21
|
+
**No Community behaviour changed this cycle** — the version moves so the trio stays in lockstep, and **the Enterprise peer floor stays `>=0.2.49`** rather than being raised reflexively, because the
|
|
22
|
+
one Community behaviour the Enterprise fix depends on already shipped there. What changed is on the
|
|
23
|
+
Enterprise side and shows up in output a Community user also reads: an Enterprise scan whose cloud
|
|
24
|
+
SDK failed to load used to report that provider as **audited**, because a plugin result carrying
|
|
25
|
+
neither an error nor a skip flag falls through to `ran` in this package's plugin manager, and
|
|
26
|
+
`auditedProviders` is derived from `ran`. Eighteen refusals across seventeen AWS and GCP plugins now
|
|
27
|
+
carry their cause, so such a provider appears as `errored` and drops out of `auditedProviders`.
|
|
28
|
+
Second: the compliance engine quotes a plugin's reason into the *"could not run"* sentence of every
|
|
29
|
+
control that plugin evidences, and it used to quote the whole thrown message — so the SDK loaders'
|
|
30
|
+
own `Install: npm install <pkg>@latest` reached the evidence-gap text of 7 SOC 2, 2 GDPR and 12 NIST
|
|
31
|
+
SP 800-171 controls. **The report now states what was not evidenced; the operator channel states how
|
|
32
|
+
to change it** — which matters most for air-gapped installs, where that instruction cannot be run.
|
|
33
|
+
|
|
20
34
|
**Sovereign and air-gapped AWS partitions stop being mistaken for commercial (CE 0.2.49 / Enterprise 0.42.0).**
|
|
21
35
|
This one DOES change CE behaviour, and Enterprise now requires it (`>=0.2.49`). `detectPartition`
|
|
22
36
|
tested only `cn-` and `us-gov-` before falling through to `'aws'`, so every ISO and European
|