v0.8.1

What's Changed

• P0 (v0.8.1 runway): commit the Windows audit of S1-S80 as tracked truth by @Navigata1 in #298
• S81 (v0.8.1 runway): case-insensitive .GARNET discovery — closes WIN-S33/36/37/46 by @Navigata1 in #299
• S82 (v0.8.1 runway): seal source-hash determinism LF/CRLF — closes WIN-S38-001 by @Navigata1 in #301
• S85 (v0.8.1 runway): interpreter deep-recursion robustness — closes WIN-S73-001 by @Navigata1 in #302
• S89 (v0.8.1 runway): @max_depth runtime enforcement seed — the kernel now enforces by @Navigata1 in #304
• S90 (v0.8.1 runway): @caps host-authority runtime enforcement seed by @Navigata1 in #307
• S83 (v0.8.1 runway): post-tag release-truth reconciliation — closes WIN-S80-002 by @Navigata1 in #311
• S84: Exp 3 Windows WSL path proof by @Navigata1 in #300
• S81: record Windows uppercase GARNET proof by @Navigata1 in #303
• S82: record Windows seal determinism proof by @Navigata1 in #305
• S85: record Windows interp parity proof by @Navigata1 in #306
• S86: add binary-strict cut readiness by @Navigata1 in #313
• S90: record Windows caps proof by @Navigata1 in #310
• S89: record Windows max-depth proof by @Navigata1 in #308
• S87: harden Windows readiness reporters by @Navigata1 in #309
• S88: add Windows release tooling status by @Navigata1 in #312
• S91: gate net and add program-entry caps frame by @Navigata1 in #315
• docs(v0.8.1): commit S91–S110 runway plan as repo source of truth by @Navigata1 in #314
• S92: guard subprocess authority at program entry by @Navigata1 in #316
• S93: add static bounded-loop verifier by @Navigata1 in #317
• S94: wire Paper VI Exp 1 provider-gated harness by @Navigata1 in #318
• S95: add Paper VI Exp 3 5K-LOC rerun harness by @Navigata1 in #319
• S96: add linear/effect safe-mode seed by @Navigata1 in #320
• S97: add provenance seal chain by @Navigata1 in #321
• S98: add capability manifest standard seed by @Navigata1 in #322
• S98: record substrate lane closeout by @Navigata1 in #323
• P0 (lane A): reconcile plan+ledger to the S99-S120 'both' ordering by @Navigata1 in #324
• S99 (Stage V): VM @max_depth trap-parity — close the VM-enforcement seam by @Navigata1 in #325
• S100 (Stage V): VM @caps trap-parity — close the authority-laundering seam by @Navigata1 in #326
• S101 (Stage V closeout): VM/interp enforcement-parity campaign + gate by @Navigata1 in #327
• S102 (Stage U): garnet agent-loop — the real agent-acceptance loop by @Navigata1 in #328
• S103 (Stage U): the ultrapunch demo — capability-bounded acceptance of agent-authored code by @Navigata1 in #329
• S104 (Stage U closeout): the ultrapunch evidence record by @Navigata1 in #330
• S105: core domain selection — 6 ultrapunch demonstrator domains (unblocks Stage X) by @Navigata1 in #331
• s105b (hold-window): OS-sandbox-apply — S46 generated -> applied+trapped on real Linux (UTM seccomp) by @Navigata1 in #332
• S106: windows cross-OS enforcement proof by @Navigata1 in #333
• S111: windows wsl domain proof repro by @Navigata1 in #334
• S110: windows wsl ultrapunch repro by @Navigata1 in #335
• S110: record merged state by @Navigata1 in #336
• S117 increment: Windows/WSL Studio smoke proof by @Navigata1 in #337
• docs: record S117 studio smoke merge state by @Navigata1 in #338
• S117 increment: WSL Linux DEB package proof by @Navigata1 in #339
• docs: record S117 WSL package merge state by @Navigata1 in #340
• S117 increment: WSL DEB install proof by @Navigata1 in #341
• docs: record S117 DEB install merge state by @Navigata1 in #342
• S117 increment: WSL RPM package proof by @Navigata1 in #343
• S117 state: record WSL RPM merge by @Navigata1 in #344
• S117: record WSL Xvfb runtime proof by @Navigata1 in #345
• docs: record S117 Xvfb merge by @Navigata1 in #346
• S117: record WSL Xvfb window capture proof by @Navigata1 in #347
• docs: record S117 window-capture merge state by @Navigata1 in #348
• S117: record WSLg system install launch proof by @Navigata1 in #349
• docs: record S117 WSLg merge state by @Navigata1 in #350
• S117: record Studio domain shell proof by @Navigata1 in #351
• docs: record S117 domain shell merge state by @Navigata1 in #352
• S117: record Release Readiness shell proof by @Navigata1 in #353
• S117: record Linux/Tauri gate replay proof by @Navigata1 in #354
• docs: record S117 Linux gate replay merge state by @Navigata1 in #355
• S107: record Mac domain and Studio UI proofs by @Navigata1 in #356
• S109: record Mac cross-OS matrix row by @Navigata1 in #357
• docs: close out S109 Mac matrix merge ledger by @Navigata1 in #358
• S108: record Linux UTM enforcement proof by @Navigata1 in #359
• S109: record full cross-OS trap parity matrix by @Navigata1 in #360
• docs: close out S109 full matrix merge state by @Navigata1 in #361
• S107: re-attest Mac domain proof slice by @Navigata1 in #362
• S107: re-attest Mac Studio UI proof slice by @Navigata1 in #363
• S112+S113: cross-OS evidence-integrity gate + reproducibility ledger (31/31 verified) by @Navigata1 in #364
• S114: kernel red-team — found + FIXED a HIGH hole (impl-method capability-surface blindness) by @Navigata1 in #365
• S115: ultrapunch dossier — the #1 claim, evidence-supported (every pointer resolves) by @Navigata1 in #366
• S116: use-case domains as proof artifacts — cross-checked against the Mac-native floor by @Navigata1 in #367
• S118: academic evidence package — every claim sourced, every source resolves by @Navigata1 in #368
• S119: v0.8.1 release-readiness gate — binary-strict whole-runway aggregator by @Navigata1 in #369
• S121–S130 Truth Sync Gate: align public/repo truth with the v0.8.1 cut by @Navigata1 in #370
• S121–S130 doc modernization: align agent-brief + ledgers + FAQ with v0.8.1 by @Navigata1 in #371
• S123 overhaul (2a+2c): bump CLI to v0.8.1 + cohesive version/help surface by @Navigata1 in #372
• S124 (Bucket 3): release tag==Cargo-version guard [HUMAN-MERGE — Rule 1] by @Navigata1 in #373
• S125 (Bucket 4): sign SHA256SUMS + attach CycloneDX SBOM to releases by @Navigata1 in #374
• S126 (Bucket 5a+5b): gitignore .agent/plans + supersede stale roadmaps by @Navigata1 in #375
• S127 (Bucket 5c): document versioning policy (pins kept — cargo-deny requires them) by @Navigata1 in #376
• S128: public-key publishing scaffold + release-verification docs by @Navigata1 in #377
• S129: publish release-signing public key + fingerprint by @Navigata1 in #378

Full Changelog: v0.8.0...v0.8.1

What's Changed

• P0 (v0.8.1 runway): commit the Windows audit of S1-S80 as tracked truth by @Navigata1 in #298
• S81 (v0.8.1 runway): case-insensitive .GARNET discovery — closes WIN-S33/36/37/46 by @Navigata1 in #299
• S82 (v0.8.1 runway): seal source-hash determinism LF/CRLF — closes WIN-S38-001 by @Navigata1 in #301
• S85 (v0.8.1 runway): interpreter deep-recursion robustness — closes WIN-S73-001 by @Navigata1 in #302
• S89 (v0.8.1 runway): @max_depth runtime enforcement seed — the kernel now enforces by @Navigata1 in #304
• S90 (v0.8.1 runway): @caps host-authority runtime enforcement seed by @Navigata1 in #307
• S83 (v0.8.1 runway): post-tag release-truth reconciliation — closes WIN-S80-002 by @Navigata1 in #311
• S84: Exp 3 Windows WSL path proof by @Navigata1 in #300
• S81: record Windows uppercase GARNET proof by @Navigata1 in #303
• S82: record Windows seal determinism proof by @Navigata1 in #305
• S85: record Windows interp parity proof by @Navigata1 in #306
• S86: add binary-strict cut readiness by @Navigata1 in #313
• S90: record Windows caps proof by @Navigata1 in #310
• S89: record Windows max-depth proof by @Navigata1 in #308
• S87: harden Windows readiness reporters by @Navigata1 in #309
• S88: add Windows release tooling status by @Navigata1 in #312
• S91: gate net and add program-entry caps frame by @Navigata1 in #315
• docs(v0.8.1): commit S91–S110 runway plan as repo source of truth by @Navigata1 in #314
• S92: guard subprocess authority at program entry by @Navigata1 in #316
• S93: add static bounded-loop verifier by @Navigata1 in #317
• S94: wire Paper VI Exp 1 provider-gated harness by @Navigata1 in #318
• S95: add Paper VI Exp 3 5K-LOC rerun harness by @Navigata1 in #319
• S96: add linear/effect safe-mode seed by @Navigata1 in #320
• S97: add provenance seal chain by @Navigata1 in #321
• S98: add capability manifest standard seed by @Navigata1 in #322
• S98: record substrate lane closeout by @Navigata1 in #323
• P0 (lane A): reconcile plan+ledger to the S99-S120 'both' ordering by @Navigata1 in #324
• S99 (Stage V): VM @max_depth trap-parity — close the VM-enforcement seam by @Navigata1 in #325
• S100 (Stage V): VM @caps trap-parity — close the authority-laundering seam by @Navigata1 in #326
• S101 (Stage V closeout): VM/interp enforcement-parity campaign + gate by @Navigata1 in #327
• S102 (Stage U): garnet agent-loop — the real agent-acceptance loop by @Navigata1 in #328
• S103 (Stage U): the ultrapunch demo — capability-bounded acceptance of agent-authored code by @Navigata1 in #329
• S104 (Stage U closeout): the ultrapunch evidence record by @Navigata1 in #330
• S105: core domain selection — 6 ultrapunch demonstrator domains (unblocks Stage X) by @Navigata1 in #331
• s105b (hold-window): OS-sandbox-apply — S46 generated -> applied+trapped on real Linux (UTM seccomp) by @Navigata1 in #332
• S106: windows cross-OS enforcement proof by @Navigata1 in #333
• S111: windows wsl domain proof repro by @Navigata1 in #334
• S110: windows wsl ultrapunch repro by @Navigata1 in #335
• S110: record merged state by @Navigata1 in #336
• S117 increment: Windows/WSL Studio smoke proof by @Navigata1 in #337
• docs: record S117 studio smoke merge state by @Navigata1 in #338
• S117 increment: WSL Linux DEB package proof by @Navigata1 in #339
• docs: record S117 WSL package merge state by @Navigata1 in #340
• S117 increment: WSL DEB install proof by @Navigata1 in #341
• docs: record S117 DEB install merge state by @Navigata1 in #342
• S117 increment: WSL RPM package proof by @Navigata1 in #343
• S117 state: record WSL RPM merge by @Navigata1 in #344
• S117: record WSL Xvfb runtime proof by @Navigata1 in #345
• docs: record S117 Xvfb merge by @Navigata1 in #346
• S117: record WSL Xvfb window capture proof by @Navigata1 in #347
• docs: record S117 window-capture merge state by @Navigata1 in #348
• S117: record WSLg system install launch proof by @Navigata1 in #349
• docs: record S117 WSLg merge state by @Navigata1 in #350
• S117: record Studio domain shell proof by @Navigata1 in #351
• docs: record S117 domain shell merge state by @Navigata1 in #352
• S117: record Release Readiness shell proof by @Navigata1 in #353
• S117: record Linux/Tauri gate replay proof by @Navigata1 in #354
• docs: record S117 Linux gate replay merge state by @Navigata1 in #355
• S107: record Mac domain and Studio UI proofs by @Navigata1 in #356
• S109: record Mac cross-OS matrix row by @Navigata1 in #357
• docs: close out S109 Mac matrix merge ledger by @Navigata1 in #358
• S108: record Linux UTM enforcement proof by @Navigata1 in #359
• S109: record full cross-OS trap parity matrix by @Navigata1 in #360
• docs: close out S109 full matrix merge state by @Navigata1 in #361
• S107: re-attest Mac domain proof slice by @Navigata1 in #362
• S107: re-attest Mac Studio UI proof slice by @Navigata1 in #363
• S112+S113: cross-OS evidence-integrity gate + reproducibility ledger (31/31 verified) by @Navigata1 in #364
• S114: kernel red-team — found + FIXED a HIGH hole (impl-method capability-surface blindness) by @Navigata1 in #365
• S115: ultrapunch dossier — the #1 claim, evidence-supported (every pointer resolves) by @Navigata1 in #366
• S116: use-case domains as proof artifacts — cross-checked against the Mac-native floor by @Navigata1 in #367
• S118: academic evidence package — every claim sourced, every source resolves by @Navigata1 in #368
• S119: v0.8.1 release-readiness gate — binary-strict whole-runway aggregator by @Navigata1 in #369
• S121–S130 Truth Sync Gate: align public/repo truth with the v0.8.1 cut by @Navigata1 in #370
• S121–S130 doc modernization: align agent-brief + ledgers + FAQ with v0.8.1 by @Navigata1 in #371
• S123 overhaul (2a+2c): bump CLI to v0.8.1 + cohesive version/help surface by @Navigata1 in #372
• S124 (Bucket 3): release tag==Cargo-version guard [HUMAN-MERGE — Rule 1] by @Navigata1 in #373
• S125 (Bucket 4): sign SHA256SUMS + attach CycloneDX SBOM to releases by @Navigata1 in #374
• S126 (Bucket 5a+5b): gitignore .agent/plans + supersede stale roadmaps by @Navigata1 in #375
• S127 (Bucket 5c): document versioning policy (pins kept — cargo-deny requires them) by @Navigata1 in #376
• S128: public-key publishing scaffold + release-verification docs by @Navigata1 in #377
• S129: publish release-signing public key + fingerprint by @Navigata1 in #378

Full Changelog: v0.8.0...v0.8.1