v1.0.0

The first public release. The fleet has run from a private repository since
April 2026; this is the same code, published with a clean history. What it
learned on the way is on the ledger, and the
trade-offs it embodies are the decisions.

Added

• Fleet Triage, twice a day: reruns a run once when its log names a
  registry refusal; for a digest repush or a patch release reads the upstream
  release notes through Claude and writes a verdict, moves the pin, pushes, and
  judges that push at the next run: green cuts a release, a red run reverts,
  any other answer is left in place. Minor and major versions are prepared on
  a branch for a person.
• Fleet Heartbeat, twice a day: whether every scheduled workflow here and
  across the fleet fired inside its own interval, whether a push workflow is
  red on main, the standard files and branch rules, every URL in every
  security policy, and an external dead-man switch for the heartbeat itself.
• Fleet Conformance, daily: digest pins, restart policies, every variable
  the compose file needs present in .env.example, every restore script run
  by a test, every prune exercised by a test.
• Fleet Catalog, daily: the catalogue, the profile's evidence line and
  fleet.json for the website, with OpenSSF Scorecard and the OpenSSF Best
  Practices badge read back from their own sites.
• Fleet Lifecycle and Fleet Scout, weekly.
• The rollouts under scripts/rollout-*.sh that took the fleet from one
  state to the next, each idempotent and naming what it left alone.
• Tests for every rule, each planting the violation the rule exists for.
• Signed releases: an archive of the tag, a keyless Sigstore signature and
  SLSA build provenance on every release, by release-assets.yml.