# 1.0.0

Initial release. Generic SARIF 2.1.0 -> TLCTC classifier.

- Multi-producer identifier extraction (Semgrep, CodeQL, Trivy, Grype, Bandit, gosec).
- CWE-first classification against tlctc-cwe.json; CVE->KEV fallback against tlctc-kev.json.
- R-ROLE resolution for #2|#3 via file-path globs.
- JSON / Markdown / enriched-SARIF reporters; --fail-on-cluster CI gate.
- Standalone, stdlib-only (no third-party deps).
