v0.1.0-alpha.2

Adds a public verification path for INK Auditability Section 7
inclusion receipts, plus a CLI any third party can run without
trusting any specific operator's UI.

Added

• verifyInclusionReceipt({receipt, witnessPublicKey, eventHash?, laterCheckpoint?}) exported from the package root. Pure function. Returns {valid, steps[]} where each step explains pass/fail with detail. Always verifies structure + Ed25519 service signature against the canonical ink/audit-inclusion/v1\n + JCS format. Optionally walks the Merkle proof when eventHash is provided, and cross-checks against a laterCheckpoint for tree-grew-not-rewound + no-fork-at-same-treeSize.
• ink CLI dispatcher with a verify-inclusion subcommand. npx @adastracomputing/ink verify-inclusion --file receipt.json --witness https://witness.example.com fetches the witness DID document + current checkpoint and runs the full verification. Witness URL is validated (https-only by default, --allow-http opt-in, no credentials). Exit code 0 = valid, 1 = invalid, 2 = usage / network / validation error. Self-contained ESM JavaScript so it works on any Node 22+ install with no TypeScript toolchain.