v1.0.0

What's Changed

• Freeze the MCP tool surface: uniform {ok,tool,result} envelope + typed params by @xxx in #161
• docs: add the stability & versioning policy for 1.0 by @xxx in #162
• Freeze the GLASS_* environment surface: register missing vars + code↔registry guard by @xxx in #163
• Lock release-artifact naming into the 1.0 guarantee + sync guard by @xxx in #164
• ci(release): rename Windows signing secrets to WINDOWS_TRUSTED_SIGNING_ prefix by @xxx in #165
• ci: pin taiki-e/install-action to its latest release SHA by @xxx in #166
• ignore .idea dir by @xxx in #167
• ci(release): mark hyphenated (pre-release) tags as --prerelease by @xxx in #168
• fix(a11y): make the set_value 'not editable' error actionable by @xxx in #169
• fix(a11y): honest toggle state — AxStates.checkable gates checked/unchecked conditions by @xxx in #170
• a11y: report toggle state on macOS + iOS, and fix the iOS switch tap by @xxx in #171
• macos: activate the launched app at start; make WindowNotFound actionable (B4 #4) by @xxx in #172
• windows-a11y: read Slider/Spinner/ProgressBar value via RangeValuePattern (B4 #8) by @xxx in #173
• mcp: return:snapshot settles the UI before folding the tree (B4 #7) by @xxx in #174
• android: surface companion checkable/checked in the a11y tree (B4 #11) by @xxx in #175
• core: a11y_snapshot refreshes window geometry so click_element uses the current window (B4 #6) by @xxx in #176
• a11y: toggle iOS switches with a trailing-edge swipe (B4 #12) by @xxx in #177
• a11y: actionable error when set_value gets a non-boolean for a switch by @xxx in #178
• docs: fix stale claims + broken links in release-bundled READMEs; add a guard by @xxx in #179
• fix(a11y): eliminate the ~25s a11y-launch hang on Linux (private-bus portal auto-activation) by @xxx in #180
• docs(changelog): note the Linux a11y-launch latency fix by @xxx in #181
• examples: add tasks_demo.py — a buggy GTK4 app for the build/debug loop by @xxx in #182
• examples: strip demo-meta from tasks_demo (don't spoil the bug the agent should find) by @xxx in #183
• ignore pycache dirs by @xxx in #184
• sandbox: make the launch target reachable under the default containment by @xxx in #186
• sandbox(macos): make the launch target reachable under Seatbelt containment by @xxx in #187
• sandbox: operator policy floor (GLASS_SANDBOX_FLOOR) + Windows read-side known-limit doc by @xxx in #188
• release: glass v1.0.0 by @xxx in #189

Full Changelog: v0.5.0...v1.0.0