release: v0.8.1

[kmadan]

Version bump only. No functional change over the PRs already merged.

Why 0.8.1 and not 0.8.0

v0.8.0 was tagged and released on GitHub on 28 August but never reached PyPI, and that tag points at e107a81 — code predating release.yaml, the golden tests and the CI fix. Moving a published tag would put different code under a name people may already have fetched, so this releases as 0.8.1.

PyPI goes 0.7.3 → 0.8.1. 0.8.0 simply never ships, which is normal.

What 0.8.1 carries over the published 0.7.3

• Policy evaluation works under CI. CI=true left opa_path as None, so every evaluation raised a TypeError on argv[0], and the path that checks for None returned mock verdicts instead. The tool is offered for "Local or CI", so this was broken wherever it is most advertised to run.
• Every advertised framework delivers the verdicts it declares, asserted for all fourteen and enforced at release by a clean-install smoke test.
• Three education policies that reached no verdict now do, via the gopal bump past fix(counts): one manifest for every published figure, and the education package that delivered nothing gopal#96.
• A tag publishes, through PyPI Trusted Publishing, gated on the tag matching the version, the wheel carrying the policy library, and that wheel producing real verdicts from a clean install.

Scope of the bump

pyproject.toml, aicertify/__init__.py, CITATION.cff, and the beta statement in the five READMEs.

Deliberately unchanged: the langfair>=0.8.0 dependency pin, and the references to v0.8.0 in the golden tests and smoke script, which are historical and describe the defect that release fixed.

Verification

The built 0.8.1 wheel carries 198 .rego files and coverage.json, installs into a clean virtualenv, and under CI=true delivers every verdict all eight smoke frameworks declare:

framework    declared delivered  floor   result
eu_ai_act          29        29     23   ok
uk                  6         6      4   ok
nist                5         5      4   ok
bfs                 4         4      3   ok
legal               3         3      2   ok
global              5         5      4   ok
healthcare          2         2      1   ok
education           5         5      4   ok

education at 5 of 5 is the defect that would otherwise have shipped.

On merge, tag v0.8.1 to publish.