HTML reports for a strict Content-Security-Policy: with --report-dir DIR --html-assets, passmcp writes the stylesheet to DIR/report.css, and both report.html and the --output html page link it instead of inlining it, so a site that serves the report under style-src 'self' shows it styled. The default single-file report is unchanged.
The Nix flake builds: nix run and nix profile install failed at 0.0.7. The flake now builds with nixpkgs' go_1_27, carries the vendor hash nix build reported, and commits its flake.lock.
--retain ages out OCSF files: report.ocsf.json was missing from the files the retention sweep knows, so it was kept forever. It is now deleted with the rest of an old report, and a test fails if the report directory gains a file the sweep does not know.
In lockstep with the passmcp family at 0.0.8, every component released together at one version. The docs now say Homebrew installs a cask, and the family table no longer describes passmcp-registry and passmcp-census as published.