KiloCheck v0.2.0

KiloCheck v0.2.0 is the first dogfoodable release: install the binary, run
kilo update, and query the verified local Kilo Data snapshot.

Included:

• direct release-asset acquisition without a third-party or reputation API
• SHA-256, manifest, table-hash, archive-safety, and freshness verification
• deterministic base-plus-edge compilation with source-group replacement
• exact IPv4/IPv6 and CIDR-prefix lookup from a compact local index
• evidence, provenance, license identity, and deterministic verdict output
• explicit unknown, missing, invalid, and stale states; stale exits with code 4
• atomic activation and preservation of the last verified snapshot on failure
• a version-pinned, checksum-verifying Linux/macOS installer with no API lookup
• property tests, 10,000-run fuzz smoke tests, cross-platform CI, and mutation
  analysis with zero surviving viable mutants

kilo check performs no network access. Only kilo update downloads the
published Kilo Data base and rolling edge release assets.

KiloCheck v0.1.0

KiloCheck v0.1.0 establishes the local-first CLI and its deterministic public
contracts.

Included:

• kilo binaries for Linux x86-64, macOS Intel, macOS Apple Silicon, and
  Windows x86-64
• stable command, observation, and status JSON Schemas
• check, status, capabilities, and schema command surfaces
• explicit missing-dataset and invalid-target behavior
• property, mutation, fuzz, and cross-platform testing gates
• SHA-256 checksum files and GitHub build-provenance attestations

This release does not yet install or query Kilo Data snapshots. kilo check
fails explicitly with DATASET_MISSING until a compiled snapshot is installed;
it never treats missing evidence as a clean verdict. The verified updater and
memory-mapped query engine are the next product milestone.