v0.1.0-beta — initial public release

Initial public release of TigerShield — a free, BSD-licensed, plugin-layer web application firewall for Tiger, built for shared hosting (no root, no daemon). Scaffold + the first protection engines.

Added

• Public release under the BSD 3-Clause license; TRADEMARKS.md split out of LICENSE (clean SPDX detection); media/ store assets; AGENTS.md.
• Dashboard widget scaffold (Tigershield_Widget_Shield) — registers against the forthcoming Tiger dashboard-widget API when present; a no-op until then.
• Front-controller firewall gate (Tigershield_Plugin_Firewall) — runs before dispatch on every request, fail-open, ships in learn mode (logs, never blocks, until an operator enforces).
• Login protection — per-IP (distributed brute force) and per-account (credential stuffing) detection off Tiger's login audit log; works on any host, no cache needed.
• Rate limiting — general per-request fixed-window limiter (APCu-backed; a graceful no-op without it); a real 429 block page on enforce.
• Admin Security screen + event log (tigershield_event) with a timestamp-versioned migration.

Decided

• No CrowdSec SDK — the CAPI surface we need (pull + push) is plain REST via a built-in lightweight client. Keeps the shared-hosting footprint tiny and dependency-free.