v0.12.2

Guardrails off and on; a judge's refusal names the hazard; ctl guard judge ask.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

CHANGELOG.md

@@ -22,7 +22,12 @@ is only released once its **exit criterion** is met, not when its code lands.
 Until v1.0.0 the minor version is the breaking one: configuration formats and Go
 APIs change between minors without a deprecation period.
 
-## Unreleased
+## v0.12.2 — 2026-10-06
+
+The guardrails turned off and on as a whole, and a judge that refuses
+ordinary requests explained: the hazard it saw is told to the client and
+kept with the request, and `llmgw ctl guard judge ask` shows what it says of
+any text. Nothing to do to upgrade; the store gains a column.
 
 ### Added
 
@@ -39,7 +44,8 @@ APIs change between minors without a deprecation period.
 - **A judge's refusal names the hazard**: the client is told `(judge:
   S6,Specialized Advice)` rather than `(judge)`, and the verdict is kept with
   the request (`guard_rule`): `ctl request`, the server's log and the
-  guardrails page show it.
+  guardrails page show it. Llama Guard 3's codes come with their names,
+  S9 Indiscriminate Weapons, without a categories list.
 
 ## v0.12.1 — 2026-10-06