Tags

Remote scoring now supports creating serialized artifacts from resolved items
and needs for downstream projects in the local environment, which can be
imported into remote graphs. This is an early, unstable iteration, and both the
user experience and documentation will be refined in future updates.

This release also includes bug fixes and introduces a new interface for diff
commands.

- **Breaking Changes**
    - Introduce `trudag manage diff` commands
        - And remove `trudag manage lint --diff` options

- **Trudag Tool Enhancements**
    - Add feature to generate artifacts for remote graphs
    - Improve error message for unexpected items without scores
    - Improve error message for normative scored items marked as informative
    - Add feature to pass boolean values to validators
    - Add feature to set-item unreviewed from cli
    - Fix missing `frontends/cli` declaration in `pyproject.toml`
    - Fix not providing a default graph name during `trudag init`
    - Fix `--help` evaluating subcommands from cli command groups
    - Refactor internal graph object access functions

- **Documentation**
    - Fix single page view
    - Clarify SME score replacement options

- **Miscellaneous**
    - Improve Flox setup
        - Run poetry install on activate
        - Add graphviz dependency for plotting

-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgzxmo32IFzwot3hlvQ0i0Hoyoyh
45GtA87PqpHUh55hQAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQFY2HJiygB0JG3kpqAFWxhP9tJa0dbKFpVZJyIQR7bprakAMIecmDt2Ayi+De+MmA9
98dFKZqczP24ImK+EQ7Ao=
-----END SSH SIGNATURE-----

-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgzxmo32IFzwot3hlvQ0i0Hoyoyh
45GtA87PqpHUh55hQAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQNlUgHF8nWFznl29ErIzQr5miPid/pXtWM6BeJ/yQKjzR1+9Is3gm9wgybSdvjQd+b
3F2X+QMv/U4ZNjp+QH5gc=
-----END SSH SIGNATURE-----

This version includes performance improvements
across several areas of the `Trudag` tool.
In this release, we added multiprocessing support
for linting tasks, which leads to faster execution.
We also introduced caching for items and the
reference builder. These changes improve the
overall experience, especially when working with larger graphs.

-**Trudag Tool Enhancements**
    - Linting tasks are now processed in parallel
    - Caching added for the reference builder and items
    - `set-link` now supports multiple links in one call
    - `set-link` now logs errors instead of raising them
    - Fixed broken links in the documentation
    - Small changes to data store values:
        - "Commit SHA" now stores whole sha rather than abbreviated version.
        - "Commit tag" appends the abbreviated commit sha.
    - Extended documentation and glossary for STPA.
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgJMFmVa903AQjUIzlIygotrA/68
koz2cFuOPw9aVUW+8AAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQDZZB58U01WgmjtvHhygSvwVdhnViIIWyh2do85Wt4/aPfDtLVUYid/V5+x7GUPwOZ
izWMtGjXFGUomSkEdq1Aw=
-----END SSH SIGNATURE-----

v2025.07.23

The new `Remote Scoring` feature allows the integration of multiple trustable
graphs (hosted in external Git repositories) into the scoring process of the
local trustable graph. This update lays the groundwork for upcoming features
related to the consumption of external graphs and introduces improvements to user experience.

- **Trudag Tool Enhancements**
  - Added new reference type: `source code reference`
  - Redesigned the graph interface to simplify the addition of new backends
  - Introduced support for an ignore list file to exclude specific files from
  Trudag operations
  - Reference classes are now loaded from the entry point file location rather work
  directory
  - Added monitoring for validator execution time
  - Improved over exception handling and linting function
  - Updated documentation for usage with Doorstop
  - More explanatory user-facing messages
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgJMFmVa903AQjUIzlIygotrA/68
koz2cFuOPw9aVUW+8AAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQPMjsCJEYaGcd6TVCIAnfvKtVZxOgo7ieuOtb+xKrw2RkAiIYpEAblbxrhslWvrgwp
JYesetg4BOzNJ+T2zu9g8=
-----END SSH SIGNATURE-----

A new feature has landed: **`Data Store`**. This feature enables users to visualize
the progression of each expectation as a graph. Additionally, users can now
**slice the graph directly from the CLI** for more targeted insights.

This release also includes several **user experience improvements to the
`trudag` tool**.

- **Trudag Tool Enhancements**

- Nodes and edges are now organized by **name** and **source name**
- Introduced the new **`Data Store`** feature:
  - Graphical view of expectations
- CLI-based graph slicing
- Added more tests:
  - Including coverage for the `publish` command
- **Publish** command improvements:
  - Now runs faster
  - Outputs only SVG images
- Matrix calculations are now more efficient
- Removed **mutable object** from constructor interface
- Improved tracebacks for **validators** and **reference plugins**

- Documentation
  - Clarified behavior of **"inputs"**
  - Fixed pinned links in the **NEWS** section

- CI Pipeline Improvements
  - Fixed issues in linting stage
  - Added more tests
  - Added **Markdown linting**

- Misc
  - Fixed a known issue related to a hidden **Python 3.13** dependency

- All `trudag` commands require a **GitLab auth token** if a
  `public: false` reference of `type: gitlab` is present in the tree.
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgJMFmVa903AQjUIzlIygotrA/68
koz2cFuOPw9aVUW+8AAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQFS5cjzuLrvoOXbKDmKDm4xwzS/bn8BryP0D9QPfatPMhO5bPOWn6TDuIqKMAHfIdR
vV3M8np9PC+ktgnVPsTgE=
-----END SSH SIGNATURE-----

Documentation improvements, ongoing implementation of dotstop (TSF-specific replacement for Doorstop) and documentation on the RAFIA process.

### Change Summary

- Added API references for trustable_compliance, graphalyzer and dotstop
- Added Lint and format checks using ruff
- Progess on implementation of dotstop
    - Read and write dotstop graphs and items natively from files
    - Reference management and reference plug-in support, including unit tests
    - YAML front matter schema
- Improved guidance for TA-MISBEHAVIOURS and associated glossary definitions
- RAFIA process documentation, illustrating some specific applications of TSF
- Renamed and expanded the TAs