Maqam 0.3.3 refreshes the public launch story, package README, website contract, and ProductLoop companion map without expanding the ToolGateway security boundary. Published from the exact reviewed commit through npm Trusted Publishing with registry provenance and installed-package verification.