20261015_4 修复Manifest编号与改名抗重放校验

CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+- Implement RFC 9981 manifest rename handling with CA-key history in a TAL-key
+  namespace, strict thisUpdate progression, exact EE SIA location binding and
+  operator warnings. Commits recheck the latest history before publishing output.
+  Start with a fresh state directory; no old-database migration is provided.
+- Report rejected manifests as partial validation results, including strict
+  completion failure when `require-complete` is enabled.
 - Detect RRDP session desynchronization from persisted notification delta hashes
   (RFC 9697), warn and recover using the current snapshot before applying deltas.
 - Select automatic TA certificates using `draft-ietf-sidrops-rpki-ta-tiebreaker-06`: