v0.7.1

uselesskey v0.7.1

Release-hardening patch for the Rust 1.95 scanner-safe fixture platform.

What's new

Publish-system guardrails

• cargo xtask publish-check now verifies PUBLISH_CRATES is in
  dependency-topological order at PR time (#572). Closes the
  PUBLISH_CRATES-drift bug class fixed inline during v0.7.0.
• cargo xtask publish-preflight and publish-check reject
  workspace.dependencies entries with version = "..." pointing at
  publish = false crates (#578). Closes the test-helper dependency-leak
  class fixed inline during v0.7.0.

Scanner-safe reference verification

• cargo xtask scanner-safe-reference --check (#577) byte-compares the
  regenerated scanner-safe bundle outputs against the committed
  examples/scanner-safe-bundle/expected/* files and asserts the encoded
  Kubernetes/Vault payloads are not committed.

External install smoke

• cargo xtask cratesio-smoke --path . (pre-publish) and
  cargo xtask cratesio-smoke --version 0.7.1 (post-publish) (#580)
  prove the outside-user view: fresh project, cargo add, cargo check,
  CLI install, scanner-safe bundle workflow.

Patch release evidence

• cargo xtask release-evidence --patch (#581) runs a focused gate set
  for patch releases without the full minor-release mutation/perf load.

Documentation

• docs/release/v0.7.0-lessons-learned.md (#571) — the v0.7.0
  publish-lane retrospective.
• docs/how-to/recover-partial-publish.md and
  docs/release/publish-recovery.md (#579) — partial-publish recovery
  procedure and registry-truth rules.
• docs/how-to/migration.md install snippets bumped to 0.7.0 (#582).

Toolchain

No MSRV change. v0.7.1 stays on Rust 1.95.

Claim boundary

uselesskey is a test-fixture layer. It is not production key
management, scanner evasion, or cryptographic assurance.

Evidence

• Release-evidence patch lane: target/release-evidence/release-evidence.md
• Scanner-safe bundle proof: target/release-evidence/scanner-safe/scanner-safe-bundle-proof.md

See CHANGELOG.md for the full v0.7.1 list.