v0.1.2

What's Changed

• Verify a peer's chain before adopting its records: stage 12 closed by @TAIPANBOX in #8
• fix(sql): one proof slot per connection, and two claims the facade could not support by @TAIPANBOX in #9
• docs: two numbers nothing owned, and the date that made one look owned by @TAIPANBOX in #10
• gate: the facade's dependency count, everywhere it is written down by @TAIPANBOX in #12
• fix(sql): a connection cap that was only a comment, and a gate for the class by @TAIPANBOX in #11
• test(anchor): one authority directory per process, and the wipe that took a stranger's by @TAIPANBOX in #13
• gate: a test's scratch directory belongs to one process by @TAIPANBOX in #14
• gate: the number of checks, counted on both sides by @TAIPANBOX in #15
• measure: the nine scratch directories, one at a time, and what two of them hide by @TAIPANBOX in #16
• test: the scratch directories that per-process paths made permanent by @TAIPANBOX in #17
• gate: the hook that runs belongs to the worktree being pushed by @TAIPANBOX in #18
• docs: how long the gate takes, measured, and the two sentences it replaces by @TAIPANBOX in #19
• test(otlp): the JSON oracle's scratch, which nothing had ever deleted by @TAIPANBOX in #20
• gate: a scratch path is removed by the file that made it by @TAIPANBOX in #21
• hook: a push that only deletes refs runs no check, and says so by @TAIPANBOX in #22
• docs: invariant 32, a gate skips only on positive evidence by @TAIPANBOX in #23
• gate: the deletion shortcut, against the cases it must and must not take by @TAIPANBOX in #24
• gate: no test waits without a bound, and the fake that was waiting by @TAIPANBOX in #25
• The record plane, runnable as one process by @TAIPANBOX in #26
• A notification is a record too: an eleventh event type, and the heraldyx seam end to end by @TAIPANBOX in #27
• A reader that remembers where it stopped in a file by @TAIPANBOX in #29
• The schema document declares es384, and every closed vocabulary is held against its enum by @TAIPANBOX in #28
• feat: the import cursor moves with every seal, not once a run by @TAIPANBOX in #30
• fix: the kem is what the readme says it is by @TAIPANBOX in #31
• feat(crypto): a custodian whose keys outlive the process that made them by @TAIPANBOX in #32
• fix(federation): the answering half ignores the predicate, and now says so by @TAIPANBOX in #33
• fix: no-unsafe read no Rust and called it clean, plus a harness by @TAIPANBOX in #34
• fix(audit): refuse a dirty advisory database, and name the files by @TAIPANBOX in #35
• feat(agentevent): web egress in the record plane, and the code it will not assert by @TAIPANBOX in #36
• feat(agentevent): an identity finding becomes a record, and a claimed subject does not by @TAIPANBOX in #37
• fix(deps): h2 0.4.17 closes RUSTSEC-2026-0258 by @TAIPANBOX in #38
• chore(ci): artifact actions off v4, to upload@v7 and download@v8 by @TAIPANBOX in #39
• docs: the agent-event importer has a throughput number now, and its limits by @TAIPANBOX in #40
• feat(agentevent): map dependency_failed onto model_call / failed / upstream_error by @TAIPANBOX in #41
• docs(agentevent): slo_burn is refused by name, and the line that refuses it by @TAIPANBOX in #42
• docs(agentevent): policy_updated is refused by name, plus the hook-environment leak that blocked the push by @TAIPANBOX in #43
• taint_shadow maps, taint_raised is refused by name by @TAIPANBOX in #44
• A lifted control is a policy decision that no longer applies by @TAIPANBOX in #45
• The three delegation types are refused, and why by @TAIPANBOX in #46
• docs(agentevent): the proof is in the erasable plane, and that is written down by @TAIPANBOX in #47
• feat(record): RECORD_V2, and the proof becomes typed metadata by @TAIPANBOX in #48
• fix(journal): a real v1 segment, and the two places that could not read one by @TAIPANBOX in #49
• A wrong trust domain consumed the file and reported nothing wrong by @TAIPANBOX in #50
• costcrew's practice events are refused by name by @TAIPANBOX in #51
• The append rate three files said had never been measured by @TAIPANBOX in #52
• trailryx declares ten binaries, and says which seven nothing should install by @TAIPANBOX in #53
• The two routine names are components, and C15 said so by @TAIPANBOX in #54
• Why no launcher serves the OTLP receiver by @TAIPANBOX in #55
• docs: the house diagram, the stack map, and a status list by @TAIPANBOX in #56
• docs: the shared stack map shows the stack that exists by @TAIPANBOX in #57
• Publish the record plane as its own image by @TAIPANBOX in #58

Full Changelog: v0.1.1...v0.1.2