v0.2.0

Portable exec: Windows builds, degraded gate-only mode with clear messaging, cross-platform packaging, macOS Seatbelt backend (kernel network plus credential-vault deny), probe script, CI cross-builds. Linux x86-64 full isolation; macOS partial; Windows gate-only.

v0.1.0

First release. Linux x86_64 baseline CPU, static binary, no dependencies. MIT licensed.