v0.1.0 — Initial release

The v2 rewrite of the Sparki-only backup script as a generic, config-driven multi-host tool.

Highlights

• Pure-bash multi-host backup with age encryption (sovereign-backup / sovereign-restore)
• Config-driven per host (autodetect via hostname -s); three shipped configs (sparki/legi/floki)
• Two destinations: local NVMe (daily timer) + USB (label-based mount-on-demand)
• Atomic lockfile (race-free mkdir, stale-PID break), tmp-then-rename writes, mtime retention
• Hardened systemd unit (ProtectSystem=strict, NoNewPrivileges, SystemCallFilter)
• Non-evaluating YAML parser; validated root-owned hooks; recipient pattern-checked before any tar
• 14-case smoke-test suite

See CHANGELOG.md for the full list.