From a2cc189cf68bfa38bf79cd78b22fde4808138514 Mon Sep 17 00:00:00 2001
From: Matt Jones <47545907+SoundMatt@users.noreply.github.com>
Date: Thu, 30 Jul 2026 14:00:55 -0700
Subject: [PATCH] =?UTF-8?q?docs:=20v1.4.0=20release=20entry=20=E2=80=94=20?=
 =?UTF-8?q?audit=20fix=20pass?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add the CHANGELOG section for the audit fix pass (#72) and update
ROADMAP's release-history table to match.

Signed-off-by: Matt Jones <47545907+SoundMatt@users.noreply.github.com>
---
 CHANGELOG.md | 27 +++++++++++++++++++++++++++
 ROADMAP.md   |  1 +
 2 files changed, 28 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a6a568d..d8872fd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,33 @@ canonical list. Dates are release dates (UTC-7, matching tag creation).
 
 ## [Unreleased]
 
+## [1.4.0] — 2026-07-30
+
+- fix: `master.Node.Diagnostics` now transmits LIN diagnostic frames
+  (0x3C/0x3D) with the classic checksum required by ISO 17987 / LIN 2.x
+  §4.2.3, instead of the enhanced checksum every other frame uses; added
+  a checksum-type-aware `Bus.PublishFrame` and routed `Diagnostics`
+  through it (#72)
+- fix: `linNode.Send`/`virtual.Bus.Publish` now return
+  `lin.ErrPayloadTooLarge` for a payload exceeding `LINMaxDataLen`
+  instead of silently accepting it (#72)
+- fix: `linNode.Send` now returns `lin.ErrInvalidFrame` (previously
+  `ErrNotConnected`) for a malformed/out-of-range message ID, matching
+  `FromMessage` (#72)
+- fix(safety): recomputed every HARA hazard's `asil` in `.fusa-hara.json`
+  from its severity/exposure/controllability fields — all six were one
+  band too high (#72)
+- test: `TestDiagnostics_requestResponseRoundTrip` now asserts checksum
+  type/value on both the 0x3C request and 0x3D response frames (#72)
+- chore: replaced internal uses of the deprecated `lin.MaxID`/
+  `lin.MaxDataLen` aliases with `LINMaxID`/`LINMaxDataLen` (#72)
+- docs: `HARA.md` SG-02 now traces to the checksum requirements
+  (`REQ-LIN-008/009/010`) instead of the PID-parity requirement (#72)
+- docs: `sas.md` no longer reports `SVP.md`/`SCMP.md`/`SQAP.md` as
+  missing — all three exist at the repo root (#72)
+- docs: removed a `CONTRIBUTING.md` project-structure row for a
+  nonexistent `transport/` directory (#72)
+
 ## [1.3.0] — 2026-07-27
 
 - fix: `virtual.Bus.CloseWithDrain` now returns `lin.ErrTimeout` (and counts
diff --git a/ROADMAP.md b/ROADMAP.md
index 6d919e7..92dea8b 100644
--- a/ROADMAP.md
+++ b/ROADMAP.md
@@ -40,6 +40,7 @@ See [CHANGELOG.md](CHANGELOG.md) for the detailed per-version changelog. Summary
 | v1.1.0 | RELAY spec v1.10 conformance — §13.7 cross-language library architecture, §20 continuous conformance |
 | v1.2.0 | Full ISO/IEC/DO compliance evidence pack, max coverage |
 | v1.3.0 | RELAY spec v1.11 conformance; `cmd/go-lin` RELAY CLI docs/Docker image; diagnostic frames, sporadic frames, LDF write-direction encoding, `stats` package; see CHANGELOG |
+| v1.4.0 | Audit fix pass: diagnostic-frame (0x3C/0x3D) classic-checksum bug, oversize-payload rejection, HARA ASIL recomputation, deprecated-alias cleanup, doc/traceability corrections; see CHANGELOG |
 
 ---