v1.0.0

A newer release is available: v1.0.1.

On a first run with no state file, this build could adopt a baseline.json
from the directory it was launched in, and that file decides what the tool
reports as normal. Writing one there needs no privilege. 1.0.1 reads only the
executable's own directory, refuses a file that does not look like a baseline,
and names the file it read in the first-run prompt.

This binary and its hash are kept unchanged for archival integrity. New
installs should use 1.0.1.

SHA-256: 675298EE41B4375C698856F81B2AE1F3E6C9CD198EB950B2731A7229F1CCC195

This binary is unsigned. SmartScreen will warn on first run until the build earns reputation.