v1.0.1 - hardened trust gates

Security-hardened release. This release supersedes v1.0.0.

Key hardening:

• Apply/Restore no longer accept a manifest override
• Exact canonical live cua_node helper path only
• Reparse-point checks cover every existing component from the drive root through the helper and backup path
• Process enumeration fails closed and blocks the Codex UI, code-mode host, node_repl, and runtime Node
• Syntax validation uses only the same runtime's valid OpenAI-signed node.exe; no PATH fallback
• Complete manifest and all mutable trust checks are repeated immediately before atomic replacement
• Shared transform module and expanded public guardrail tests
• Sanitized validation-evidence register with direct issue-comment links

Validation: 99 public guardrail assertions passed; 102 passed with the private exact-hash fixture. No live runtime was modified.

Current @oai/sky 0.6.6 builds remain audit-and-retest only. Do not apply the legacy patch when the regression gate passes.

v1.0.0 - guarded recovery kit

Superseded by v1.0.1.

Do not use the v1.0.0 Apply/Restore scripts. v1.0.1 tightens manifest trust, canonical live-runtime paths, reparse-point checks, process enumeration, signed-Node validation, and pre-replacement rechecks. The read-only inspection and background analysis remain available in the current main branch.