v0.3.0

Changelog

Features

• feat(cli): pick a model when the command names none
• feat(cli): render the model's replies as it writes them
• feat(cli): align listings without breaking on colour
• feat(cli): styled help, errors, completions and man pages
• feat(cli): decide in one place how output is styled
• feat(signing): verify a signature found through referrers
• feat(signing): index signatures through the referrers API
• feat(cli): pack accepts hf:// sources
• feat(hf): resolve and fetch models from Hugging Face
• feat(cli): enforce the verification policy when a model is served
• feat(cli): let load enforce the verification policy
• feat(transfer): carry signatures through pull, save, and cp

Fixes

• fix(store): reclaim a model whose signature outlived it
• fix(transfer): never fail a transfer over the signature lookup
• fix(cli): stop a signature-shaped tag bypassing bundle verification

Documentation

• docs(roadmap): image volumes are confirmed on the containerd K3s embeds
• docs(deploy): a redirecting registry must redirect somewhere the node can reach
• docs: the terminal experience
• docs(cli): show one real invocation per command
• docs: signatures are discoverable through the referrers API
• docs(router): cite the architecture document by heading
• docs: pack straight from Hugging Face
• docs: verification covers every way a model gets used
• docs: signature identity includes the registry host
• docs(adr): record how signatures are stored and verified
• docs: signatures verify offline from a bundle

Other

• refactor(signing): verify from any read-only target

---

Binaries are static (CGO disabled). The checksum file is signed with
cosign (keyless); see .goreleaser.yaml for the verify command.