v0.1.0

Changelog

Everything else

• a642c1d: Fix the release signing, which cosign no longer accepts (Northbeams joe.m@kyslan.com)
• 9899b3d: Let two runs write the baseline at once on Windows (Northbeams joe.m@kyslan.com)
• 2e9d3f6: Make the Windows CI run mean something (Northbeams joe.m@kyslan.com)
• 58a8984: Publish Scorecard results now that the repository is public (Northbeams joe.m@kyslan.com)
• a3a659d: Release 0.1.0 (Northbeams joe.m@kyslan.com)
• aceb4f0: Skeleton: shared model, renderers, scanner stubs, local drift baseline (Northbeams joe.m@kyslan.com)
• 5b71c30: Stop .gitignore swallowing test fixtures (Northbeams joe.m@kyslan.com)
• ece0af1: agentsurface v1: four detectors, repo furniture, and the no-network guarantee (Northbeams joe.m@kyslan.com)

---

Verify this release before you run it. docs/VERIFY.md in this tag has
copy-pasteable commands for the checksums, the cosign signature, the build
provenance attestation, and rebuilding the binary from source to confirm it
matches.

This tool makes no network calls, has no account and uploads nothing.
.github/workflows/no-network.yml is the check that enforces that, and it
ran on this commit before these artefacts were built.