v0.1.0

Changelog

• 11b308c Initial commit
• 4e93814 Merge pull request #1 from DavidGodefroid/feat/site-logo
• 6649bd1 Merge remote-tracking branch 'origin/main' into feat/site-logo
• 4685d10 feat(cli): install (gate uid, rootless subuid), init, console, gate, signer, ca init, doctor
• eac52c9 feat(console): lockkit backend serving http.approve and policy.get
• 345685a feat(decide): floor, rules, defaults, Claude API allowlist, secrets, exfiltration score, shadow mode
• 6068d60 feat(gate): CONNECT/SNI gate, MITM, ask queue, grants, sources, audit; CA and signer
• 407258e feat(policy): canonical policy, loosening diff, auto-forbidden classes
• 3fe2f43 feat(site): lockhttp logo, banners, OG image and touch icon
• 6176c8e feat(site): lockhttp.com, deployed to GitHub Pages
• c381750 fix(decide): ask on ambiguous Claude API JSON, deny duplicate credentials
• ce105f6 fix(gate): fail-closed ClientHello, decided Host upstream, unambiguous body fingerprints
• 26d8240 fix(gate): hash JSON bodies with \u escapes raw
• 0a02c8f fix(policy): removing or narrowing a non-free rule is a loosening
• 45cc497 fix: canonical JSON only without duplicate keys, install checks parents and hard links, staticcheck
• 9b01e57 fix: hard checks before grants, deny list kept in shadow, full-header fingerprints; docs
• a95d3ab test(cli): skip Unix-only install and mode checks on Windows
• 7124a16 test(integration): gate against a real lockkit console in-process