## dreadl0ck/netcap — v0.10.4…v0.11.0

_30 commits._

### Features
- **Add bounded TLV hypotheses and classified resource experiments** (284ccfd)
- **Add signed sensor-scoped collection imports and retention** (c277a90)
- **Add bounded protocol server, TLS proxy and experiment triage workflows** (9b85c16)
- **Add explicit flow windows, distributions and estimated time series** (ac14626)
- **Add strict protocol field hypotheses and stream comparisons** (49637b3)
- **Add qualified offline TLS session-secret analysis adapter** (1a73c8f)
- **Add capture provenance, bounded retention and investigation evidence UI** (3ae57c4)
- **Add byte-exact stream evidence and bounded protocol experiments** (e0078ec)
- **Add scoped flow export ingestion, health and investigation reports** (955146f)
- **Add book-driven investigation accounting and verifiable evidence exports** (411c8ba)

### Backend
- **Keep backpressure qualification portable across TCP receive windows** (c7d8025)
- **Prepare Netcap v0.11.0 investigation release** (2ce5902)
- **Expose signed sensor imports and document qualified investigation workflows** (13c16ae)
- **Qualify all 38 book workflows with scoped integration evidence** (37944eb)
- **Expose routing filters and parser health in investigation interfaces** (e61b520)
- **Qualify proxy injection, successful mutations and backpressure** (1f590b3)
- **Persist IOC and behavioral qualification alerts through the rules engine** (57f9277)
- **Retain qualification IOC alerts with portable evidence references** (21d7328)
- **Qualify paginated recon and export reproducible book case evidence** (d7d2f83)
- **Expose native artifact downloads from shared investigation evidence UI** (0965b14)
- **Integrate bounded protocol emulation and reproducible experiments** (2ec296c)
- **Integrate qualified NSM book workflows and FTP data extraction** (4004b98)
- **Complete FTP data correlation and qualify book network workflows** (e61162e)
- **Complete bounded protocol emulation, isolated mutation and reproduction workflows** (1fd86a3)
- **Qualify NSM and flow book cases with synthetic packet replay** (ffcba50)
- **Allow direct module downloads when the public proxy refuses CI** (7baaf96)
- **Merge current network detection release into investigation work** (814a78a)
- **Resolve retained connection observations by exact snapshot identity** (92c43df)
- **Include transitive libtrace dependencies in Ubuntu runtime** (5e93ea3)
- **Bundle Ubuntu DPI runtime libraries and smoke-test startup** (8d6651a)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/dreadl0ck/netcap?utm_source=github-action)._