v0.2.0

First feature iteration on the v0.1 line.

Added

• verify --json / diff --json — machine-readable reports so CI can branch on results with jq instead of scraping the colored table. verify --json carries a per-skill array, a summary tally, and a top-level drift boolean (same condition --ci exits non-zero on). diff --json carries an escalation boolean plus the offending grants.

Fixed

• Glob-aware cross-version diff — skillsig diff and the ~/.skillsig/lock.yaml lock check previously used a literal string set-difference, so tightening an existing grant was wrongly reported as an escalation (e.g. narrowing Bash(git status*) → Bash(git status -s), or \${WORKSPACE}/** → \${WORKSPACE}/build/out.txt). The diff now reuses the same coverage predicate as the in-version verify check on every axis (tools + fs_write + network_egress), so only a genuinely new, uncovered grant fails CI.

Full notes: CHANGELOG.md