# jfind — Changelog

## v1.0.1 — 2026-06-22

- Add `--full` extended-help flag per SUITE_STANDARDS.md §3 (`<tool> --full` and `<tool> <subcmd> --full` print top-level long-help followed by every subcommand).

## v1.0.0 — 2026-06-10

Initial release. Phase 1 of the cli.johlem.net consulting layer.

- Library crate (`jfind`) + CLI binary (`jfind`).
- Schema `jfind/v1` (Finding) + `jfind-bundle/v1` (Bundle), with
  controlled vocabularies in `jfind::vocab` (severity, confidence,
  asset type, known categories).
- Canonical JSON serialization: BTreeMap-sorted keys, compact output —
  identical bytes for identical logical documents, regardless of
  producer-side key insertion order.
- Ed25519 sign/verify for individual findings.
- BLAKE3 Merkle root over per-finding canonical bytes; bundle-level
  signature covers `{schema, bundle_id, engagement, merkle_root}`.
- Chain-of-custody helper: each event's `hash` links to the previous
  event so reorder/edit/remove tampering is detectable.
- CLI subcommands:
  - `validate <file…>` — schema + signature + chain integrity.
  - `sign --key <path> <file>` — sign in place.
  - `verify <file…>` — strict signature + chain check (exit 3 on fail).
  - `merge <bundle…> -o <out>` — engagement-scoped, deterministic.
  - `filter <bundle>` — by severity range, time, tool, category.
  - `stats <bundle>` — counts (human or JSON).
  - `new-key --out <path>` — fresh Ed25519 keypair.
- Mandatory tagline footer on every `--help`:
  `[ jfind ] ─ an independent project by johlem.net`.
- 11 tests (3 unit + 8 integration) green; zero compiler warnings.