v0.7.1

What's Changed

• chore: ship itd-130 and itd-132 with their fidelity audits by @REPPL in #569
• fix: name the stale binary behind an unknown command or flag by @REPPL in #570
• fix: name the update verb from version --check and the schema-too-new refusals by @REPPL in #573
• docs: elevate the status-line design to itd-200 and plan it into spc-70 by @REPPL in #574
• docs: record that itd-132 reverses itd-130's data-directory decision by @REPPL in #578
• feat: the GRILL rule domain asks one question at a time in the addressee's register by @REPPL in #579
• feat: keep auto-merge pull requests current for the merge queue by @REPPL in #576
• fix: neutralise markdown link syntax in untrusted prose before it lands in a record by @REPPL in #580
• fix: the orphan sweep never deletes a record under a refused ingest by @REPPL in #575
• feat: mint intents and specs through the timestamp seam by @REPPL in #577
• docs: bring the brief current with the v0.7.0 surface by @REPPL in #586
• test: pin the supply-regime gate's tables by content, not by iteration by @REPPL in #584
• fix: the changelog composer writes only Added and Fixed by @REPPL in #587
• fix: the wall-clock bootstrap assertion, RS001's stale-branch diagnosis, and the go-run convention by @REPPL in #589
• ci: give the check job thirty minutes, twice its macOS leg's quiet-run duration by @REPPL in #591
• fix: redact a PEM private key's whole body and every git identity scope, in the one shared primitive by @REPPL in #592
• fix: stage transcripts under a lock, and seal every gitleaks finding or refuse the capture by @REPPL in #593
• fix: guard every issue-ledger read, refuse symlinked ledger paths, validate before promote mints by @REPPL in #590
• fix: run every isolated git command without detached background maintenance by @REPPL in #595
• fix: bound the rules root at the working tree, label repo overrides, keep rule continuations in their bullet by @REPPL in #594
• fix: redact every memory leaf a write introduces, scan the store on lint, admit https only, and keep credentials out of origins by @REPPL in #596
• fix: land the itd-185 fidelity-audit fixes on main by @REPPL in #597
• fix: give bash-executable tokenizer states a verdict, match glob-spelled hazards, and read in-process git aliases by @REPPL in #598
• fix: hold the release-gate manifest to the tree, refuse a floating judge model, keep code spans intact in cleaned prose by @REPPL in #599
• fix: refuse a rebuilt or credentialed ahoy state, and harden the owned copy and the hook shim's PATH rung by @REPPL in #600
• fix: print next moves for an open issue that run as printed by @REPPL in #602
• chore: release v0.7.1 by @REPPL in #603

Full Changelog: v0.7.0...v0.7.1