v0.1.0

What's Changed

• LM Studio collector: loaded models and measured cost (#16) by @cybagard in #53
• Pre-commit hook: block likely secrets by @cybagard in #54
• Relicense under AGPL-3.0-only by @cybagard in #57
• R2: budget model — reserved vs used vs headroom (#19) by @cybagard in #56
• R1: record samples to disk for baseline and suggest (#55) by @cybagard in #58
• R3: worktree attribution (#20) by @cybagard in #60
• R4: observe view — headroom and headroom --watch (#21) by @cybagard in #61
• Daemon lifecycle: launchd agent, install/uninstall, logs (#22) by @cybagard in #62
• Samples: record LM Studio models' status, TTL and last use (#23) by @cybagard in #64
• headroom suggest: learn thresholds from recorded samples (#23) by @cybagard in #65
• R8: policy engine and the check op (#24) by @cybagard in #66
• R10: leases (#25) by @cybagard in #68
• R5: shim core: find the real binary and exec it (#26) by @cybagard in #69
• R5: command parser for docker/podman/tart (#27) by @cybagard in #70
• R5: shim identity, deny and wait (#28) by @cybagard in #73
• R6: macOS VM slot gate (#29) by @cybagard in #75
• R7: fail open within the timeout, in one line (#30) by @cybagard in #76
• R9: launch agents with the shims first on PATH (#31) by @cybagard in #77
• Collect Ollama's loaded models and footprint (#59) by @cybagard in #79
• Add headroom doctor (#32) by @cybagard in #80
• Loop: review until a clean round; decline only what does not hurt users by @cybagard in #83
• Loop: a fixed review budget; diagnose instead of looping by @cybagard in #86
• Spike: Kilo's before-tool hook can deny with a message (#11) by @cybagard in #93
• Flag containers and VMs started without a check (#33) by @cybagard in #82
• Loop: an orchestrated, budgeted TDD loop on Matt Pocock's skills by @cybagard in #101
• Spike note: correct identity, --pure and lease statements (#92) by @cybagard in #97
• Attribution: a mounted .git of the main checkout no longer makes a linked worktree's container ambiguous (#94) by @cybagard in #99
• Lease book: renew a covering lease only when its start is allowed (#88) by @cybagard in #103
• Loop: what the first orchestrated run (#88) taught by @cybagard in #105
• Issue tracker: GitHub, named, and never local markdown by @cybagard in #106
• Kilo note, lease comments: say what the cited code does (#96) by @cybagard in #108
• Plan: retire docs/plan.md; the plan is GitHub's epics and sub-issues by @cybagard in #113
• Suggest: ollama_idle_gb and advice on Ollama models with no expiry (#78) by @cybagard in #115
• Lease model: missing readings, restarts, denials, a shared name (#91) by @cybagard in #117
• Shim: resolve docker's engine once, first, as its CLI does (#90) by @cybagard in #119
• Compose: name a project as Compose does when its config fails, as a guess (#84) by @cybagard in #121
• Ollama: see a server run by another user (#81) by @cybagard in #116
• Compose: name a project from its env files, as Compose does (#85) by @cybagard in #123
• Attribution: an identical ID is the same repo; list each ID once (#98) by @cybagard in #125
• Suggest: pin the per-day threshold, count only counted days, leave out values above the limit (#114) by @cybagard in #127
• Attribution: two comments say what the code does since #98 (#124) by @cybagard in #128
• Config: bound the policy sizes, and leave them out of suggest above the bound (#126) by @cybagard in #129
• Shim: decide this Mac as the client dials the host, per scheme (#118) by @cybagard in #130
• Lease: a container missing from one reading is not gone (#87, #110) by @cybagard in #132
• Compose env files: inputs Compose rejects are unknown; ~ files as Compose reads them; one working-dir rule (#122) by @cybagard in #133
• Lease: after a crash, a restart binds only its own worktree's compose lease (#89) by @cybagard in #135
• Lease: a crashed container of a start of several can be claimed by a later checked start (#111) by @cybagard in #137
• Lease: a compose takeover keeps the warm-up of the services it does not start (#112) by @cybagard in #139
• Lease tests: pin #112's takeover rule against its four surviving mutants (#138) by @cybagard in #140
• Lease comments: what every keyless lease shares, and whose the name key is (#107) by @cybagard in #142
• Lease comments: a start's keys and what it leaves out, as covered says (#141) by @cybagard in #144
• Lease: pin the stop-then-up window, fix N-1's die during a reading, pin failed reads (#131) by @cybagard in #148
• Lease: guessed compose ups in the model; a guess lapses at its timeout (#120) by @cybagard in #151
• logs -f: follow from where the tail stopped, so a line logged at start is not lost (#149) by @cybagard in #152
• Lease: keep a crashed verdict past a short lease timeout and through a crash loop (#134) by @cybagard in #154
• Lease comments: a start leaves covered containers out of its key and cost (#143) by @cybagard in #155
• Lease: a later checked lease claims a start's dead container across a deferred start, a second death, and a name-bound first (#136) by @cybagard in #157
• Lease: a worktree's lapsed compose lease vouches for its whole late stack (#145) by @cybagard in #160
• Lease: a restart of a still-bound container also marks its start event's binding (#147) by @cybagard in #161
• Lease model: a guessed hit taken by an open real up at its start is the up's (#150) by @cybagard in #163
• Lease tests: pin a crashed verdict's die clock and a stopped verdict's listing clock (#153) by @cybagard in #164
• Events: replay what Docker sent during a reconnect, deduped by identity (#146) by @cybagard in #166
• Lease tests: pin #136's append guard, letGo's ID check and the in-place bind (#156) by @cybagard in #167
• Lease model: guessed-hit boundBy matches the book in a guess tie and after missed readings (#162) by @cybagard in #169
• Shim: send the compose working dir with a check; a lapsed lease with a dir vouches for its stack (#158) by @cybagard in #173
• Release workflow: build and publish darwin/arm64 binaries on a v* tag (#171) by @cybagard in #175
• Docs: milestones are releases; Pick picks from the earliest open milestone (#172) by @cybagard in #177
• Events: pin what a replay may resend, linear window, and dedupe repeats in a stream (#165) by @cybagard in #178
• Docs: README for v0.1.0; SECURITY, CONTRIBUTING, docs lint (#179) by @cybagard in #180
• Uninstall: keep a binary that is a link, as Homebrew's is (#181) by @cybagard in #184
• Daemon: --link-shims and ~ in --log, for brew services (#185) by @cybagard in #188
• Homebrew hardening: install, uninstall and --link-shims refusals (#183, #186, #187) by @cybagard in #189

Full Changelog: https://github.co...