v0.12.47: @newsroom.writer: Chainguard, mapped

A new article written here from two voice memos: Chainguard mapped from the operating system to its new agent products (MCP servers, Workspaces, Checks, Harness, Agent Skills), and its public data downloaded and counted. The OSV index lists 12,480 advisories over 12,125 CVEs; a random sample of 300 records gives 71% of components fixed and 19% false positives; the libraries' OpenVEX index holds 732 documents; the archived wolfi-dev/advisories repository holds 30,030 advisories and 2,850 not-applicable decisions, of which 177 give a context reason. The argument: the graph stops at the package, and deciding which images must be fixed and which can ship today needs a context layer from the user story to the container, written as a policy row per image. Where open behaviour policies, sgit vaults and an open format for deployment decisions plug in. Two figures.