chore(release): v0.11.0

.bumpversion.toml

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 [tool.bumpversion]
-current_version = "0.10.4"
+current_version = "0.11.0"
 parse = "(?P<major>\\d+)\\.(?P<minor>\\d+)\\.(?P<patch>\\d+)((?P<pre_l>a|b|rc)(?P<pre_n>\\d+))?"
 serialize = [
     "{major}.{minor}.{patch}{pre_l}{pre_n}",

.github/ISSUE_TEMPLATE/security_vulnerability.yml

@@ -29,7 +29,7 @@ body:
     attributes:
       label: Zenzic version
       description: Output of `zenzic --version`
-      placeholder: "0.10.4"
+      placeholder: "0.11.0"
     validations:
       required: true
 

.gitignore

@@ -16,8 +16,21 @@
 .zenzic.local.toml
 
 # ────────────────────────────────────────────────────────────────────────────
-# AI Tools & IDE Integrations
-# ────────────────────────────────────────────────────────────────────────────
+# AI Orchestration & Private Workspace (Zero-Leak Governance)
+# ────────────────────────────────────────────────────────────────────────────
+# Private Tech Lead workspace (formerly .draft)
+.architect/
+# Local AI routing rules (Trade Secret)
+.clinerules
+# Cursor AI rules (Trade Secret)
+.cursorrules
+# AI Primers and Memory ledgers
+.github/agents/
+# Legacy draft vaults
+.draft/
+/drafts/
+
+zenzic.code-workspace
 .gemini/
 .copilot/
 .cursor/
@@ -28,27 +41,18 @@
 .redteam/
 
 # ────────────────────────────────────────────────────────────────────────────
-# Python
+# Python Build & Distribution
 # ────────────────────────────────────────────────────────────────────────────
 __pycache__/
 *.py[cod]
 *$py.class
 *.so
-
-# Distribution / packaging
+*.egg
+*.egg-info/
 build/
 dist/
-*.egg-info/
-
-# Zenzic: Drafts
-.draft
-drafts/
-Draft/
-*.egg
 MANIFEST
 .installed.cfg
-
-# PyInstaller
 *.manifest
 *.spec
 
@@ -61,15 +65,12 @@ env/
 ENV/
 
 # ────────────────────────────────────────────────────────────────────────────
-# uv
+# Package Managers (uv / Hatch)
 # ────────────────────────────────────────────────────────────────────────────
 # uv.lock is committed (application lock file — do not ignore)
 .python-version
-.uv/                 # uv internal cache
-
-# ────────────────────────────────────────────────────────────────────────────
-# Hatch
-# ────────────────────────────────────────────────────────────────────────────
+# uv internal cache
+.uv/
 .hatch/
 
 # ────────────────────────────────────────────────────────────────────────────
@@ -88,13 +89,8 @@ coverage-*.json
 coverage.json
 .tox/
 .nox/
-
-# --- Ephemeral Artifacts (Machine Silence) ---
-zenzic-results.sarif
 mutmut*
 .mutmut-cache/
-.pytest_cache/
-
 mutants/
 
 # ────────────────────────────────────────────────────────────────────────────
@@ -106,21 +102,25 @@ dmypy.json
 .pyre/
 .ruff_cache/
 .cache/
-zenzic_report/      # Optional HTML report exports from zenzic
-.zenzic_cache/      # Reserved for a future linter cache
-# Zenzic quality scores — derived local metadata, never committed
+# Optional HTML report exports from zenzic
+zenzic_report/
+# Zenzic local cache (e.g., external links)
+.zenzic_cache/
+# Zenzic quality scores — derived local metadata
 .zenzic-score.json
+# SARIF outputs — generated by `zenzic check --format sarif`
+*.sarif
 
 # ────────────────────────────────────────────────────────────────────────────
-# Documentation build caches (user projects, not Zenzic's own docs)
+# Documentation build caches
 # ────────────────────────────────────────────────────────────────────────────
 site/
 pdf/
 .mkdocs_cache/
 .zensical_cache/
 
 # ────────────────────────────────────────────────────────────────────────────
-# Web & JS (Optional but recommended)
+# Web & JS
 # ────────────────────────────────────────────────────────────────────────────
 node_modules/
 .npm/
@@ -136,73 +136,50 @@ tmp/
 temp/
 .artifacts/
 artifacts/
+# Migration staging area
+.temp/
 
 # ────────────────────────────────────────────────────────────────────────────
 # IDEs & Editors
 # ────────────────────────────────────────────────────────────────────────────
-# Visual Studio Code
 .vscode/
 !.vscode/extensions.json
 !.vscode/settings.json
-
-# IntelliJ IDEA / PyCharm
 .idea/
 *.iml
-
-# Vim
 *.swp
 *.swo
 *~
 .*.sw?
-
-# Emacs
 \#*\#
 .\#*
 
 # ────────────────────────────────────────────────────────────────────────────
 # Operating System
 # ────────────────────────────────────────────────────────────────────────────
-# macOS
 .DS_Store
 .AppleDouble
 .LSOverride
 ._*
-
-# Windows
 Thumbs.db
 ehthumbs.db
 Desktop.ini
-
-# Linux
 .Trash-*/
+*.ps
+/sys
 
 # ────────────────────────────────────────────────────────────────────────────
 # CI/CD
 # ────────────────────────────────────────────────────────────────────────────
 .github/workflows/.secrets
 .gitlab-ci-local/
-.wrangler/              # Cloudflare Wrangler local cache
-
-# SARIF output — generated by `zenzic check --format sarif`; not a source file
-*.sarif
-
-# ────────────────────────────────────────────────────────────────────────────
-# Migration staging area (v0.6.0a1 — Clean Harbor)
-# ────────────────────────────────────────────────────────────────────────────
-.temp/
+# Cloudflare Wrangler local cache
+.wrangler/
 
 # ============================================================================
 # End of .gitignore
 # ============================================================================
 
-# EPOCH 4 — draft vault (git-ignored, local reference only)
-.draft/
-zenzic.code-workspace
-
-# ImageMagick / tooling artifacts
-*.ps
-/sys
-
-# VS Code Copilot agent definitions (local-only)
+# AI Agent Private Memory
+.clinerules
 .github/agents/
-.zenzic_cache/

.pre-commit-hooks.yaml

@@ -7,7 +7,7 @@
 #
 #   repos:
 #     - repo: https://github.com/PythonWoods/zenzic
-#       rev: v0.10.4
+#       rev: v0.11.0
 #       hooks:
 #         - id: zenzic-verify    # quality gate — corrisponde a `just verify` lato zenzic
 #         - id: zenzic-guard     # fast staged-file credential scan

.zenzic.toml

@@ -78,7 +78,7 @@ default_locale = "en"
 [project_metadata]
 release_name = "Magnetite"
 obsolete_names_exclude_patterns = ["CHANGELOG*.md", "CHANGELOG*.archive.md", "changelogs/*.md", "RELEASE.md"]
-badge_stamp_files = ["README.md", "README.it.md"]
+badge_stamp_files = ["README.md"]
 
 [governance]
 # ---------------------------------------------------------------------------