v0.1.0 — first public alpha

Greenlock is a deterministic verify-gate for AI-generated code changes: a patch is
applied only if the oracle is green — closed-world ✔, the project's own tests pass,
no regression — otherwise it is refused, untouched. Headline: WRONG-APPLY = 0.

Highlights

• gate (verify-only) + generate-and-gate; exit 0/1 for CI & pre-commit.
• execution isolation (--isolated / GREENLOCK_DOCKER): whole gate in a locked
  Docker container (network-off, read-only, non-root, limits), fail-closed.
• honest coverage-based confidence: changed lines must actually be exercised by the
  suite, else degrade → reject (no false MERGE). Python/pytest only in 0.1.0.
• testgen (characterization tests), danger-check (+ --trust advisory mode),
  MCP server, GitHub Action.

Known limitations (read before relying on it)

• Coverage-based confidence is Python/pytest only — node/go/rust treat a green suite
  as full confidence (multi-language coverage is the next milestone).
• Coverage uses in-process tracing → execution in test-spawned subprocesses is invisible
  (fail-open: never blocks a green patch on a measurement gap).
• Not a sandbox unless --isolated; the verifier executes your tests. See SECURITY.md.
• Alpha; install from source (not yet on PyPI).

Full notes: see CHANGELOG.md.