v1.4.0 - Context-Aware Risk Explanations

🆕 Major Improvement: Scenario-Based Recommendations

The Problem

Security tools often use one-size-fits-all "best practices" that don't consider user context. For example:

• "❌ FAIL: FileVault is NOT enabled" → User panics, enables it, breaks their remote restart workflow

The Solution

ClawGears now provides context-aware risk analysis:

📌 这个检查项的作用:
   防止硬盘被盗/丢失后，他人读取您的数据

⚡ 对您的实际影响:
   ┌─────────────────────────────────────────────────────┐
   │ 使用场景                              │ 风险程度 │
   ├─────────────────────────────────────────────────────┤
   │ Mac 固定在安全办公室                  │ 🟢 较低  │
   │ 经常携带外出（咖啡厅/出差）           │ 🟠 较高  │
   │ 需要远程重启控制（SSH/远程管理）      │ ⚪ 可接受│
   └─────────────────────────────────────────────────────┘

💡 建议:
   等级: 【可选】(根据实际场景决定)
   
   • 如果您是因为远程控制需求而关闭 FileVault，这是合理的选择
   • 可以通过其他方式补偿风险...

What's Changed

• Context-aware explanations for all security checks
• Scenario-based risk tables instead of binary pass/fail
• Graded recommendations: 🔴必须 / 🟠建议 / 🟡可选 / ⚪评估后决定
• Legitimate reasons to not fix acknowledged
• Alternative compensating measures suggested

Philosophy

User autonomy > Blind compliance
Scenario analysis > Blanket recommendations
Transparent risk explanation > Fear-based warnings

Files Changed

• scripts/quick-check.sh - Full rewrite
• scripts/system-security-check.sh - Updated checks
• README.md - New demo section
• CHANGELOG.md - Release notes

---

Full Changelog: v1.3.0...v1.4.0