v0.3.2

Early beta: HayaSend is intended for non-critical evaluation.
APIs and data models can change before v1. Cloudflare support is
not production-ready.

What's Changed

• chore: pin portable deploys to v0.3.1 by @yhay81 in #166
• Add guarded Railway hosted proof workflow by @yhay81 in #167
• Add guarded hosted proofs for portable vendors by @yhay81 in #168
• fix: verify portable vendor capability contracts by @yhay81 in #169
• feat: verify runtime deployment capability drift by @yhay81 in #170
• Add hosted upgrade and rollback proofs by @yhay81 in #171
• feat: add provider-neutral backup and restore proof by @yhay81 in #172
• Simplify AWS deployment and operations by @yhay81 in #173
• Harden AWS stack lifecycle protections by @yhay81 in #175
• Adjust npm package size budget by @yhay81 in #176
• Add safe Lambda canary deployments by @yhay81 in #177
• Add AWS backup and isolated restore testing by @yhay81 in #178
• Purge versioned AWS integration buckets safely by @yhay81 in #179
• Prove AWS Backup restores semantically by @yhay81 in #180
• Harden AWS integration rollback cleanup by @yhay81 in #181
• Protect only retained resources present in the AWS stack by @yhay81 in #182
• Add least-privilege AWS deployment bootstrap by @yhay81 in #183
• fix(aws): permit operator readiness checks by @yhay81 in #184
• fix(aws): allow the scoped SAM transform by @yhay81 in #185
• fix(aws): cover CloudFormation handler actions by @yhay81 in #186
• fix(aws): allow bucket CORS configuration by @yhay81 in #187
• fix(aws): read scoped deployment artifacts by @yhay81 in #188
• fix(aws): authorize managed API Gateway tagging by @yhay81 in #189
• fix(aws): invoke managed custom resources by @yhay81 in #190
• fix(aws): complete drift detection access by @yhay81 in #191
• fix(aws): scope drift status polling correctly by @yhay81 in #192
• fix(aws): authorize drift resource reads by @yhay81 in #193
• fix(aws): inspect Lambda runtime drift by @yhay81 in #194
• feat(migration): add fail-closed Resend readiness workflow by @yhay81 in #195
• fix(security): document bounded CLI file selection by @yhay81 in #196
• chore: prepare v0.3.2 release by @yhay81 in #197
• ci: allow bounded container pull variance by @yhay81 in #198
• fix(aws): use exact restore testing plan name by @yhay81 in #199
• fix(aws): correlate restore jobs by recovery point by @yhay81 in #200

Full Changelog: v0.3.1...v0.3.2