v0.3.0

Added

• Added a Claude provider design covering hook event normalization, storage and privacy behavior, install command requirements, and MVP acceptance criteria.
• Added a GitHub PR workflow design covering local-only PR comments, future CI-assisted receipt checks, artifact contracts, and deterministic policy boundaries.

Fixed

• Fixed session filesystem capture so agentreceipt start launches a durable watcher sidecar, records fs.change events while active, and flushes watcher evidence before stop finalizes the receipt.
• Fixed review summaries so Codex command results update detected command status to success or failed when matching result evidence is present, while attempt-only commands remain unknown.
• Fixed review flag behavior by making review --codex-jsonl import a Codex trace into the active session before review and removing inactive --full and --provider flags.
• Fixed receipt verification portability by embedding the signer public key and key ID in new receipts while preserving legacy local-key verification.
• Fixed Codex watch tailing so large appended logs are read in bounded chunks while preserving complete-line offsets and partial-line safety.
• Fixed confidence reporting so Codex parse-warning-only evidence does not count as imported provider tool evidence.