Repository navigation
v0.8.0: the synced HTML viewer treats every note as data (issue #1 point 6): allowlist sanitizer, script-safe timeline JSON, hash-pinned CSP with no network, relative-only media URLs. route_inputs --json gains a shell-free argv plan (point 4). pyproject.toml and three-OS test CI (point 7). transcript.json contract doc and SECURITY.md. See CHANGELOG.