Sviluppato in pubblico.

Establishes the core seven-pillar model as the foundational structure of Wombat. Extended to eight pillars by RFC-0012.

Defines the public roadmap for 2026 covering Q1–Q4 milestones, v1.0 target, pilot programme, and foundation readiness goals.

Adds the initial content definition for each of the 7 pillars. Later extended to cover the 8th Agentic pillar (RFC-0012).

Migrates all framework documentation from Markdown to AsciiDoc and establishes Antora as the documentation build system with component versioning.

Adds the standard open-source health files to the framework repository.

Introduces the Sovereign pillar as the 7th pillar of Wombat with 10 initial controls (WAF-SOV-010 through WAF-SOV-100).

Restructures the Governance pillar into modular best-practice pages and adds case-study content.

Defines a formal schema for Wombat controls YAML files, enabling validation and tooling integration for the 83+ controls library.

Formalises the PASS scoring model as a normative specification for tier definitions, calculation rules, aggregation logic, and versioning contract.

Defines the approach for official Wombat assessment tooling including the WOMBATpass CLI, server, dashboard, and web scorecard.

Introduces automated checks and release workflows for framework, wafpass-core, wafpass-server, and wafpass-dashboard repositories.

Adds the Agentic pillar as the 8th pillar of Wombat with 10 initial controls, regulatory mappings, and bilingual documentation.

Standardises machine- and human-readable remediation guidance for every Wombat control so operators can act on findings directly.

Defines how WOMBATpass detection and controls will be extended to cover Azure, GCP, and other cloud providers while keeping the framework cloud-agnostic.

CI checks for dead xrefs, unregistered nav.adoc files, and control-schema consistency between YAML, AsciiDoc, and navigation.

Expand Sovereign definitions, evidence matrix, and create real overview/glossary pages for resources and wording.

Complete Agentic pillar maturity, evidence, glossary, and best-practice pages with examples.

Standardise module links, convert relative xrefs to module-prefixed xrefs, and clean Markdown links.

Finalise antora.yml registration, create pillar-security nav, update README/AGENTS for 8-module layout.

Align controls to 8 pillars, add Agentic, and extend control-schema.adoc.

Extends WOMBATpass CLI, server, and dashboard to evaluate the Agentic pillar controls as part of a full PASS assessment.

Releases WOMBATpass CLI v1.1.0, Server v1.1.0, and Dashboard v1.1.0 with Pillar-8 Agentic support, detection fixes, and SINA Cloud region detection.

Unify fragmented test and coverage strategy across wafpass-core, server, and dashboard.

Define API maturity, backwards-compatibility rules, and versioning strategy for WOMBATpass APIs.

Define a reliable source-snapshot ingestion contract so dashboard preview and auto-fix work consistently.

Reduce dashboard navigation fragmentation and add guided onboarding with role-based landing pages.

Make dashboard notifications actionable instead of passive text displays.

Expand the control-packs feature beyond admin-only uploads to a real marketplace with discovery and governance.

Tie maturity tiers to CI/CD policy gates so pipelines can block promotion below a target tier.

Allow curated aliases for long auto-generated MCP tool names so LLMs can match them more naturally.

Add MCP Resource definitions for run://{run_id}, control://{id}, etc. to expose read-only data without multiple tool calls.

Extend auto-fix/classify with an apply step that records changes and supports rollback.

Add cursor-based pagination helpers so large runs do not blow MCP message size limits.

Add fix blocks to control YAMLs or a central provider registry so common assertions get default patches.