Release 0.4.0 - compliance encryption: iOS App Encryption / export-compliance gate - legal: Play Data Safety ephemeral + per-action purposes; service-provider SDKs marked collected-not-shared; legal generate --only - doctor: validates encryption.json / iap.json / metadata field lengths - --version reads from package.json; listing exits non-zero on limit violations