v1.2.25

What's Changed

• ci: pin runner images to fixed OS versions (drop -latest) by @nam20485 in #44
• fix(security): harden model downloads (MEDIUM-1) by @nam20485 in #45
• test(worker): fault-injecting coverage for out-of-process IPC paths by @nam20485 in #46
• test(platform): coverage W4 — platform-detection seam, CI un-exclusion, examples tests by @nam20485 in #47
• test(text): hermetic coverage for text engines, tokenizer assets, streaming options by @nam20485 in #48
• test(core): cover engine lifecycle, streaming KV-cache, registry and download error paths (W3) by @nam20485 in #49
• docs: remediation log — program completion record by @nam20485 in #50
• feat(registry): populate sha256 integrity hashes for shipped model catalog by @nam20485 in #51
• chore: remove archive/*.seda (I7) by @nam20485 in #52
• Promote development → main: 1.2.18 — attestation, signature gate, coverage wave, registry hashes by @nam20485 in #53
• Promote main → release: 1.2.18 by @nam20485 in #54
• test(text): make corrupt-cached-vocab test hermetic across OSes by @nam20485 in #65
• Promote development → main: 1.2.19 (test-hermeticity fix) by @nam20485 in #66
• Promote main → release: 1.2.19 by @nam20485 in #67

Full Changelog: v1.2.17...v1.2.25