Changelog

• cee87c1 chore(release): cut v0.8.3 (#133)
• 8c57e9e Merge pull request #132 from sensiblebit/feat/connect-verbose-chain-metadata
• 95e4b39 fix(certstore): wrap wasm sqlite stub errors
• ebffca9 docs: refresh transport probe docs
• b5741be fix(certstore): stub sqlite persistence on wasm
• 3b16e56 feat(connect): show verbose chain PEM metadata
• ff9532a Merge pull request #131 from sensiblebit/feat/transport-probing
• 0a75991 fix(review): tighten STARTTLS result metadata
• dd5e6b6 fix(review): tighten helper and SSH parsing
• 58e8295 fix(review): tighten transport probe follow-ups
• 53e8904 fix(review): tighten probe review handling
• 42375c9 fix(review): clarify SSH and LDAP follow-ups
• 897dec4 fix(review): tighten transport review cleanup
• be024e3 fix(review): tighten transport policy follow-ups
• 602fcb2 fix(ssh): normalize SSH-1.99 protocol banner
• e9a0e71 docs(rules): add PR comment helper workflow
• d1956cc fix(review): tighten transport follow-ups
• 7b09a2d fix(review): tighten STARTTLS preflight checks
• 0611036 fix(review): tighten transport probe feedback
• eb9d00f fix(connect): label protocol-specific TLS upgrades
• 32236e3 fix(review): tighten transport probing edge cases
• babe06e fix(review): address transport probing feedback
• a97ef45 fix(cli): add probe ssh format flag
• 2ade505 fix(starttls): tighten preflight diagnostics
• 0adcb4d fix(ssh): send client kexinit before probing
• a5a6631 fix(review): tighten transport probe follow-ups
• be90192 fix(starttls): tolerate imap untagged prelude
• 86dbf71 docs: clarify shared SSH policy heuristics
• 3d2df2f fix(review): harden policy and SSH parsing
• 9aa5698 fix(review): tighten SSH and STARTTLS polish
• 4bf4f14 docs(rules): require PR docs audit agent
• 8078a64 docs: refresh examples and architecture
• 28235d1 fix(review): harden STARTTLS retry detection
• 3d5bf24 test(review): table-drive probe ssh output checks
• 4f09162 fix(review): harden STARTTLS preflight parsing
• 2f617f2 fix(review): tighten STARTTLS follow-ups
• 5ff59da docs(rules): require fresh PR comment snapshots
• d4cd6cb docs(rules): close stale agents before spawn
• 29c487c fix(review): harden transport protocol parsing
• 7d0c30c fix(review): tighten transport probe coverage
• dfffa29 ci: enable actionlint hook
• 4a7e3d5 refactor(ssh): use input structs in display helpers
• 9e2c203 docs(rules): require delegated review fixes
• 19e02e9 docs(rules): tighten push and PR workflow
• a4cb657 fix(review): tighten transport probe behavior
• 61d70cb docs(changelog): cover transport probe hardening
• 402e238 fix(review): harden transport probe edge cases
• a9da874 fix(review): tighten STARTTLS auto-detection
• a2cfd2e fix(review): simplify transport helper signatures
• 0727948 fix(review): handle additional STARTTLS cases
• 4e44313 fix(review): address transport probing feedback
• 8f548d1 feat(probe): add transport probing and STARTTLS support
• 13e9940 Merge pull request #130 from sensiblebit/chore/strict-golangci-lint
• 581ecd7 fix(scan): reuse symlink target stat for size checks
• 0e09bfa fix: address final review comments
• c652725 fix(quic): remove dead varint panic
• 902fbc7 fix(passwords): stream password files
• 96e60a6 chore(lint): add more useful golangci checks
• 07c7f50 fix: surface probe encoding failures
• e5e207c docs: allow stricter golangci repo config
• 9e2ef58 fix: restore sane output permissions
• 1cabcc5 fix: address review follow-ups
• 9bfc08b fix(probes): return errors on record length overflow
• 3eb9c52 fix(codeql): inline legacy sha1 compatibility paths
• 1863188 chore(lint): satisfy strict golangci config
• 51be9a6 chore(lint): reduce strict golangci baseline
• 2cf8db8 docs(go): add package comments
• bd1a270 chore(lint): enable strict golangci checks
• 066ad9f Merge pull request #129 from sensiblebit/fix/remove-wasm-file-cap
• 1281c5c fix(wasm): surface overflow warnings in inspect
• b5b7450 fix(wasm): keep scanning after total size overflow
• 3743603 fix(wasm): stop fan-out after total upload limit
• c68b53e docs(changelog): reference PR #129 for WASM cap removal
• a4cc8f5 fix(wasm): stop rejecting legitimate large folder drops