Release the complete Taproot knowledge layer

[kcsfelty]

Summary

• implement the complete Taproot Item/Property knowledge layer, including canonical Wikibase-shaped entities, revisions, lifecycle, attribution/audit history, search, RDF projection, migration, integrity, and repair
• atomically coordinate canonical entities, immutable revisions, audit events, search terms, RDF ownership, and Diamond quad patches in one D1 batch
• replace the local Diamond dependency with the public @gnolith/diamond@^0.3.2 release
• prepare @gnolith/taproot@0.1.0 as a public MIT package with project-specific documentation, governance, support, templates, pinned CI/security workflows, and an OIDC-only release workflow

Correctness and integration evidence

• 19 tests pass, including 12 Workerd/D1 integration and example scenarios
• rollback injection proves canonical JSON, revisions, audit events, terms, RDF ownership, and Diamond quads fail atomically
• concurrent same-revision edits permit exactly one writer
• migration, malformed input, empty commands, size limits, shared RDF nodes, integrity inspection, repair, redirects, and audit chains are covered
• Taproot writes are queried through Diamond SPARQL on the same D1 database
• packed tarball installs into a completely fresh temporary project with registry Diamond and passes a public-API D1/SPARQL smoke test

Release-quality validation

pm run check

• coverage: 78.42% statements, 72.72% branches, 72.44% functions, 78.42% lines with enforced thresholds
• production dependency license allowlist passes

pm audit reports zero vulnerabilities

pm audit signatures verifies 769 registry signatures and 85 attestations

• release metadata and the 48-file tarball pass
  pm run release:check -- v0.1.0

Release and security impact

The repository remains private and this PR remains draft until every new CI/security check passes. After merge, the repository will be made public and protected before the initial npm publication. npm trusted publishing requires the package to exist first, so the initial

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.