v0.7.0 — Phase 14 multi-stage pipelines + SSRF hardening
Headline: Phase 14 — multi-stage training pipelines. One YAML, one
CLI invocation, one Annex IV manifest covering SFT → DPO → GRPO (or
any sequence of supported trainers). Auto-chained model paths,
per-stage gates (auto-revert / human-approval / safety), crash-safe
state, 7 new pipeline-scoped audit events all sharing a single
top-level run_id for SIEM-style grouping.
Security: DNS-rebinding TOCTOU SSRF hardening on the webhook / judge
/ synthetic outbound paths (issue #14). requests-toolbelt is now a
hard dependency.
Backward compatibility: single-stage configs (no pipeline: block)
reach forgelm/trainer.py byte-identical to v0.6.0; the orchestrator
module is never imported on the single-stage path.
See CHANGELOG.md [0.7.0] — 2026-05-14 for the full entry.