What's Changed
- Run close: ledger iss-107 and record the release acceptance result (F18) by @REPPL in #90
- docs: one-line checksum-verified installer in the README by @REPPL in #91
- docs: capture itd-92 — branch-protection assurance for managed repos by @REPPL in #92
- harden: classify the symlinked sources-index refusal (close two bug-hunt frontiers) by @REPPL in #93
- harden: close the graveyard-read lstat->read TOCTOU (guarded primitive) by @REPPL in #94
- harden: guard the untrusted CLI JSON-operand reads (symlink-follow + unbounded) by @REPPL in #95
- harden: stop secrets surviving a trailing-underscore in the redaction scanner by @REPPL in #96
- test: disable async git background ops in lifeboat tests (fix .git-cleanup flake) by @REPPL in #97
- release: v0.3.0 by @REPPL in #98
- Fix the semantic release gate and cut v0.3.0 by @REPPL in #99
Full Changelog: v0.2.0...v0.3.0