release: v0.3.0 — governance leaderboard, 60-case corpus, Apache-2.0

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -57,7 +57,7 @@ body:
     id: core-version
     attributes:
       label: signetry-core version
-      description: The pin you installed (e.g. `v0.7.0`), or the output of `signetry --version`.
+      description: The pin you installed (e.g. `v0.8.0`), or the output of `signetry --version`.
     validations:
       required: true
 

.github/workflows/reviewer.yml

@@ -35,7 +35,7 @@ jobs:
           python-version: "3.12"
       - name: Install signetry-reviewer
         # signetry-reviewer is not published on PyPI; install it from its source repo.
-        run: pip install "signetry-reviewer @ git+https://github.com/Signetry/reviewer@v0.2.0"
+        run: pip install "signetry-reviewer @ git+https://github.com/Signetry/reviewer@v0.3.0"
       - name: Compute the PR diff
         env:
           BASE_SHA: ${{ github.event.pull_request.base.sha }}

CHANGELOG.md

@@ -3,7 +3,7 @@
 Follows [Keep a Changelog](https://keepachangelog.com/) / [SemVer](https://semver.org/).
 Until `1.0.0` the public API may change between minor versions.
 
-## [Unreleased]
+## [0.3.0] — 2026-09-01
 
 ### Added — the Agent Governance Leaderboard
 

SECURITY.md

@@ -14,8 +14,8 @@ Always run the latest — the corpus and the pinned `signetry-core` move togethe
 
 | Version | Supported |
 |---|---|
-| `0.2.3` | ✅ current — 7-language detection corpus, pinned real-repo cases, `signetry-core` `v0.7.0` |
-| `0.2.0`–`0.2.2` | ⚠️ superseded — the "pinned" real-repo cases were silently scanning the default-branch tip (see `CHANGELOG.md`) |
+| `0.3.0` | ✅ current — the governance leaderboard, 60-case OWASP corpus, `signetry-core` `v0.8.0` |
+| `0.2.0`–`0.2.3` | ⚠️ superseded — the "pinned" real-repo cases were silently scanning the default-branch tip (see `CHANGELOG.md`) |
 | `< 0.2.0` | ❌ upgrade |
 
 ## Reporting a vulnerability

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "signetry-eval"
-version = "0.2.3"
+version = "0.3.0"
 description = "The public adversarial evaluation suite for Signetry: measures attack success rate (ASR) and utility-under-defense for coding-agent prompt injection, skill/MCP poisoning, and memory-injection threats, governed by signetry-core."
 readme = "README.md"
 requires-python = ">=3.11"
@@ -22,7 +22,7 @@ classifiers = [
     "Topic :: Software Development :: Quality Assurance",
 ]
 dependencies = [
-    "signetry-core @ git+https://github.com/Signetry/core@v0.7.0",
+    "signetry-core @ git+https://github.com/Signetry/core@v0.8.0",
 ]
 
 [project.urls]