TRP v0.5.1

Trust Requirements Profile v0.5.1

An open standard for stating and verifying the trust requirements of AI and
autonomous systems.

This release adds independent verification infrastructure to the v0.5
specification draft.

Added

• Conformance test suite: 27 tests covering schema validation, schema
  rejection for known violations, example profile correctness, and evaluator
  determinism.
• GitHub Actions CI running conformance and cross-evaluator checks on every
  push and pull request.
• Node.js evaluator producing standings identical to the Python reference
  implementation, with no shared code between them.
• trust.json discovery specification, defining how services publish trust
  requirements at a well-known URI following the conventions of robots.txt
  and security.txt (RFC 9116).
• INTEGRATIONS.md, describing how TRP composes with SPIFFE, AAuth, auth.md,
  MCP, W3C Verifiable Credentials, and A2A.
• Profile authoring guide.
• SECURITY.md vulnerability reporting policy.
• Evaluation metadata with result hashing for attributable, tamper-evident
  results.

Changed

• Removed trust_score from evaluator output. The standard publishes signals
  and outcome tiers; scoring stays outside the specification.

The specification version remains 0.5. Profiles targeting spec_version "0.5"
are unchanged by this release.

Released under the Apache License 2.0.