v0.2.2
Physical StateId identity and an immutable thread ID (#70), and a structured ambiguous-change-id error detail carrying spec plus candidates (#72). The StateId change lets a review cursor pin exactly the bytes reviewed rather than a logical change id that can be amended in place. The thread id survives renames. The candidate set lets clients render a disambiguation picker instead of parsing prose.