v0.12.33: @newsroom.writer: Attacks rewritten as mandates

A new article written here, from voice memos on the eve of Chainguard Assemble London: Chainguard's public ledger of 28 supply-chain incidents read through the four columns of an Agent Behaviour Policy. Every row is reach beyond mandate; by our reading a consumer-side control would likely have held in 26 and a publisher-side mandate in 16; the huggingface-cli slopsquat as the first case where the consumer was a model; Chainguard's agent fleet post (Maxime Gréau, 4,746 pull requests in eight weeks, 840 auto-merged) read as a policy whose mandate is scattered; three records for an agent's supply chain; and what a hardened registry offers a small, active open source project. Three figures. The research vaults behind it are not published.