v0.9.1

What's Changed

• docs(readme): align all crate READMEs to v0.9.0 + correct release-process crate count by @Naoray in #267
• feat: add restore telemetry foundation by @Naoray in #261
• [agent] docs: add restore-boundary architecture by @Naoray in #260
• feat: enforce strict manifest-bound restore by @Naoray in #262
• feat: add restore-boundary raw PII audit events by @Naoray in #270
• feat(xtask): readme-version-check gate + wire into publish-crates workflow by @Naoray in #271
• docs(skills): add release orchestration skill by @Naoray in #272
• [agent] docs: surface gaze daemon mode (cli.md + README + adopter quickstart) by @Naoray in #273
• [agent] docs: surface gaze proxy / mcp / document (cli.md + getting-started + README) by @Naoray in #274
• [agent] docs: reframe gaze daemon as stdio server (LSP/MCP terminology) by @Naoray in #276
• [agent] docs+test: clarify Session = pseudonym namespace (closes #275) by @Naoray in #277
• [agent] docs(session): extract contract to session-contract.md + fix truncated words by @Naoray in #278
• [agent] feat(gaze-document): enforce agent/owner bundle partition at type + path level (closes #489) by @Naoray in #279
• [Aikido] AI Fix for Template Injection in GitHub Workflows Action by @aikido-autofix[bot] in #280
• [Aikido] AI Fix for 3rd party Github Actions should be pinned by @aikido-autofix[bot] in #281
• [Aikido] AI Fix for Path traversal attack possible by @aikido-autofix[bot] in #283
• ci/fix: restore green test (gaze-mcp-core tool_ctx_seal trybuild) by @Naoray in #289
• fix(gaze-recognizers): NER detect() fail-closed + >512-token chunking (P0 never-leak) by @Naoray in #290
• feat(cli): accessibility output gate + tests (NLnet submit-gap business#31) by @Naoray in #287
• ci: enforce DCO sign-off on PRs by @Naoray in #288
• [agent] release: v0.9.1 by @Naoray in #291

New Contributors

• @aikido-autofix[bot] made their first contribution in #280

Full Changelog: v0.9.0...v0.9.1