Six Apache-2.0 MCP language SDKs join the lockstep family: passmcp-sdk-go, passmcp-sdk-python, passmcp-sdk-java, passmcp-sdk-cpp, passmcp-sdk-typescript, and passmcp-sdk-rust enter the released 0.0.10 manifest under ADR 0013 with 2025-06-18 through 2026-07-28 conformance and offline in-toto attestation verification.
Portfolio-dogfooded catalog and PII precision: catalog.toxic_combination excludes closed-world bundled-fixture readers (openWorldHint: false), catalog.tools.annotation_honesty accepts read-only inspection and simulation run_* / execute_* tools while rejecting command/script/migration runners, and telemetry.Redactor.KeepIdentifier prevents server and catalogue names from self-masking when echoed under "name".
Upgraded to satellion.com/passmcp-reporting v0.0.10: go.mod, go.sum, SBOM.md, install snippets, and the generated 15-repository family table move in lockstep to 0.0.10.