v1.1.0 — Final Comprehensive Release (3-CVE Taxonomy, StealMyBitcoin Post-Mortem & Diagnostic Tooling)

Summary of v1.1.0 Updates

1. 3-CVE Comprehensive Taxonomy:
   • Explicitly classifies and details CVE-2026-109618, CVE-2026-109619, and CVE-2026-115560 across all technical documentation.
2. StealMyBitcoin Challenge Post-Mortem:
   • SAPI Architecture Disambiguation: Documents empirical findings comparing disposable FastCGI workers (PHP-FPM) vs. persistent HTTP workers (PHP built-in CLI server php -S with PHP_CLI_SERVER_WORKERS=4).
   • Lab-verified reproduction of Chain D (forged HashTable overlapping fake call frame -> zif_system callback with output exfiltration via /proc/self/fd/).
3. Defensive Posture Tooling (tooling/checker/):
   • Non-destructive diagnostic CLI with strict PHPSESSID charset handling and built-in anti-prompt-injection regex guards.
4. Reproducible Lab Environment:
   • Makefile and tooling/docker-compose.yml for immediate side-by-side comparison of vulnerable (8.4.26) vs. patched (8.4.27) baselines.
5. Verified Publication Artifacts:
   • Includes formatted typography release PDFs (php2shell-REPORT.pdf v1.7, 10 pages; php2shell-RESUMEN.pdf, 3 pages) with verified SHA-256 checksums.