v0.2.0
Security and usability hardening release.
Highlights:
- explicit final-batch review gate and live review preflight
- shallow commit authorization that cannot leak to unreviewed descendants
- duplicate-write protection, precise unstaging, and stale-batch expiry
- correlatable receipts and native DeepSeek Harness presentation cards
- threat model, production policy example, and Node 22/24 CI
Validation: 23 automated tests, package check, and publint all pass against published DeepSeek Harness rc.6 packages.