v0.9.0

What's Changed

• docs(readme): anchor restore example on ghostwriter use case by @Naoray in #228
• docs(readme): polish ghostwriter section — ASCII flow + org typo by @Naoray in #229
• [agent] refactor(safety-net): bench matrix expansion (v0.9 #33c) by @Naoray in #230
• feat(safety-net): pin OPF source and snapshot by @Naoray in #231
• [agent] feat(cli): emit entries in plaintext JSON gaze clean response (#323) by @Naoray in #232
• [agent] chore(fixtures): replace @example.com with @example.invalid (#285) by @Naoray in #233
• [agent] docs(metrics): introduce metrics.md SSOT (#327) by @Naoray in #235
• feat(safety-net): ship Python kiji-runner reference wrapper (#33d partial) by @Naoray in #236
• [agent] refactor(audit): consolidate SqliteLogger leak-suspect method (#294) by @Naoray in #234
• [agent] feat(safety-net): pin OPF checkpoint bundle SHA (#33d follow-up) by @Naoray in #240
• [agent] refactor(api): rename redact_* → pseudonymize_* per north-star (#293) by @Naoray in #237
• [agent] feat(audit): NER-provenance schema migration (11 cols, additive) (#309) by @Naoray in #238
• [agent] feat(safety-net): score OPF direct-detector cells (#33d follow-up) by @Naoray in #241
• [agent] feat(safety-net): locale-aware Pass-3 dispatcher (#33e precursor) by @Naoray in #242
• [agent] docs(readme): correct ghostwriter flow (app owns lookup, LLM owns prose) by @Naoray in #246
• [agent] feat(safety-net): observer-residual cells + latency snapshot (#33d follow-up) (re-target #243) by @Naoray in #248
• [agent] feat(bench): end-to-end gaze pipeline benchmark (detection + perf) by @Naoray in #244
• [agent] feat(bench): multi-NER model leaderboard (#33d follow-up) by @Naoray in #245
• fix(ci): free preinstalled bloat to unblock ubuntu-latest disk-full by @Naoray in #249
• docs(readme): remove link to private demo repo by @Naoray in #251
• feat(pipeline): tier 4 — skip-gating + prefix cache (#370) by @Naoray in #252
• fix(v0.9.1): follow-up wave (5 HIGH findings) by @Naoray in #253
• docs(readme): qualify proxy scope — API-key path only by @Naoray in #254
• feat(kiji): in-process ort backend (#366) by @Naoray in #250
• feat(kiji): int8 dynamic quantization (#368) by @Naoray in #256
• feat(cli): gaze daemon mode (#367) by @Naoray in #255
• feat(bench): tiny-model leaderboard (#371) by @Naoray in #258
• feat(bench): runtime comparison — ort vs tract vs candle (#369) by @Naoray in #257
• release: v0.9.0-rc.1 by @Naoray in #259
• chore(scrub): remove absolute home paths by @Naoray in #265
• release: prepare v0.9.0 final by @Naoray in #263

Full Changelog: v0.8.1...v0.9.0