v1.1.0

What's Changed

• feat(brand): refresh to caret identity (2026-06-11 rebrand) by @apundhir in #6
• chore(brand): OG card v2 — install line + truthful status token by @apundhir in #7
• chore(brand): remove retired split-A assets by @apundhir in #8
• chore(release): reclassify package status to Beta by @apundhir in #9
• fix(core): Phase 1 release-blocking correctness (B1-B6) by @apundhir in #10
• feat(assess): non-interactive assessment from a YAML answers file by @apundhir in #11
• fix(export): derive test_requirements and cross_references into the RMF by @apundhir in #12
• fix(export): populate audit_entry_hash and signed_by in the exported file by @apundhir in #13
• feat(risk): add 'risk mitigate' to record mitigations via the CLI by @apundhir in #14
• chore(server): mark serve experimental; enforce --allow-external; fix help/output by @apundhir in #15
• test(ci): honest coverage floor + CLI-surface contract test by @apundhir in #16
• test/harden(storage): reject system_id path traversal; band property tests by @apundhir in #17
• test/ci(release): lock RMF structure; fix broken/masked SBOM + release gates by @apundhir in #18
• docs(readme): accuracy pass (PyPI logo, hashing vs signing, full workflow, layout) by @apundhir in #19
• docs: add full user guide; fix CONTRIBUTING accuracy by @apundhir in #20
• feat(examples): worked sample systems + make eval regression harness by @apundhir in #21
• perf(audit): O(n) tail-chained append; add benchmarks by @apundhir in #22
• release(v1.1.0): version bump, derive version, re-promote to Production/Stable by @apundhir in #23

Full Changelog: v1.0.0...v1.1.0