v1.0.0

What's Changed

• Retire DB2 and use PostgreSQL as the sole provider for Server and KB by @JBailes in #2999
• Fix memory rejection boundaries and clarify Server/KB ownership by @JBailes in #3000
• Provide native-memory source records to enrolled thin clients by @JBailes in #3001
• Stage signed native-memory executable v0.2.3 candidate by @JBailes in #3002
• Refresh reviewed release snapshots for testing promotion by @JBailes in #3004
• Prepare Aimee 1.0.0: replaceable memory, documentation and CI fixes by @JBailes in #3005
• Repair native-memory source export and stage signed three-model release by @JBailes in #3006
• Explain Aimee security guarantees and harness compatibility by @JBailes in #3008
• Fix Vault credential handoff under egress process hardening by @JBailes in #3007
• Cover Cognee protocol, isolation and recovery failure paths by @JBailes in #3009
• Refresh reviewed Vault bootstrap surface baselines by @JBailes in #3010
• Record published-image release qualification and resolved Cognee gates by @JBailes in #3011
• Freeze repaired memory, Vault and egress release sources by @JBailes in #3012
• Qualify E2B and E4B native plugins and document security governance by @JBailes in #3013
• Prepare final five-model native-memory 0.3.3 release payload by @JBailes in #3014
• Prepare Aimee 1.0.0 promotion with native-memory server support by @JBailes in #3003

Full Changelog: v0.4.6...v1.0.0