b37b40e · Oversight

v0.4.9: hybrid browser decrypt, Rust registry v1, Outlook scaffold

- Browser inspector at oversightprotocol.dev/viewer/ now decrypts both
  OSGT-CLASSIC-v1 and OSGT-HYBRID-v1 sealed files end-to-end. Vendored
  ML-KEM-768 from @noble/post-quantum + WebCrypto X25519/HKDF-SHA256 +
  vendored XChaCha20-Poly1305. KEK bound X-wing-style.

- oversight-rust/oversight-registry passes the v1 conformance harness
  33/33 in live-URL mode, with strict CORS on GET/OPTIONS only.
  oversight-manifest now carries canonical_content_hash + l3_policy.

- oversight-rust/oversight-formats: text/image watermark round-trip
  regressions fixed; workspace test suite green.

- New integrations/outlook/ scaffold: Office 1.1 MailApp manifest,
  task pane that imports the public viewer's parse/verify/decrypt
  directly. Architecture in docs/OUTLOOK.md.

b37b40e Zion Boggan committed on May 7, 2026 (1 month ago)

CHANGELOG.md +6 -1

		@@ -1,6 +1,11 @@
		# Oversight CHANGELOG

	-	## Unreleased
	+	## v0.4.9 - 2026-05-07 Hybrid browser decrypt, Rust registry v1, Outlook scaffold
	+
	+	The browser inspector now decrypts post-quantum sealed files end-to-end,
	+	the Rust registry passes the v1 conformance harness 33/33, and a thin
	+	Outlook task-pane scaffold lets us start a tenant pilot. Format watermark
	+	regressions in `oversight-rust/oversight-formats` are also resolved.

		- Outlook add-in scaffold landed (2026-05-07). New `integrations/outlook/`
		with the Office add-in 1.1 manifest (`MailApp`, read-mode task pane,

README.md +1 -1

		@@ -110,7 +110,7 @@ The attribute command runs a 5-phase pipeline:
		4. Multi-layer Bayesian fusion combining all evidence into ranked candidates
		5. Content fingerprint comparison (winnowing + sentence hashing) as a last resort when all watermarks are stripped

	-	## Coming in v0.4.9 (unreleased; on `main`)
	+	## What's new in v0.4.9

		Browser inspector decrypts hybrid (post-quantum) sealed files.
		The viewer at <https://oversightprotocol.dev/viewer/> now decrypts

oversight_core/__init__.py +1 -1

		@@ -31,4 +31,4 @@ __all__ = [
		"l3_policy",
		]

	-	__version__ = "0.4.8"
	+	__version__ = "0.4.9"

pyproject.toml +1 -1

		@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"

		[project]
		name = "oversight-protocol"
	-	version = "0.4.8"
	+	version = "0.4.9"
		description = "Open protocol for cryptographic data provenance, recipient attribution, and leak detection."
		readme = "README.md"
		license = {text = "Apache-2.0"}