Release v2.0.1
Fixed
- Audit: the root
.env.exampleis seeded, never byte-compared — the canon fixes its variable names and section format while values and product-specific sections diverge per repository, so customization no longer reads as shared-file drift (which kept every adopter at "Baseline conforming: no") (#138). - The repository's own
SECURITY.mdnow carries the published reporting policy (private vulnerability reporting, dedicated security mailbox) (#138). - Changelog cut into released sections — v2.0.0 shipped with all entries still under Unreleased; adoption docs now also state that the catalog repository itself is not a manifest-carrying adopter (#138).
Full Changelog: v2.0.0...v2.0.1