v0.1.0

• First release: project exactly one directory tree, read-only, with the root fixed before anything is served and every path resolved against it
• Refuse an excluded path, a path outside the root, and a path that was never there with one indistinguishable answer, so a refusal is never an oracle for what exists
• Compare containment by path component after canonicalization rather than by string prefix, and compare an opened file's identity against the resolved one so a substitution between the check and the open is refused
• Follow a symlink whose target stays inside the root and list but never open one that leaves, with --no-symlinks to follow none at all
• List directories in one stable order and read files as text or as bytes under an explicit ceiling on any single read
• Serve the same projection to programs over a bearer-protected loopback HTTP API with a committed OpenAPI 3.2 contract and standalone JSON Schemas, returning file bytes with a media type taken from the extension and never sniffed from content
• Open the same projection as a trusted local window whose page never renders workspace content as markup, and keep it current by watching exactly the directories somebody has open rather than recursing
• Leave the person's files unaltered: no writes at any route, and no redaction of file contents at any boundary
• Publish through Homebrew and Scoop alongside crates.io and GitHub Releases