Zero Breach v0.1.8

Security and correctness update. Please re-download if you are on an earlier version.

Fixes

• Self-reported version corrected. v0.1.7's single file reported Zero Breach 0.1.6 because the version string had drifted in the build. If you are on v0.1.7, it does contain the security fix despite reporting 0.1.6 — identify it by its SHA-256. v0.1.8 reports its version correctly, and the build now derives the version from a single source and fails if it does not match the release being cut.
• Network paths refused in the download. The single-file build now refuses --iocs and --json paths that are not on a local disk (UNC and mapped network drives), matching the source CLI. This prevents a path supplied in someone else's instructions from making Windows open an SMB connection.

Carried forward from v0.1.7: PowerShell is resolved by its absolute System32 path and runs in a controlled working directory (the local executable-hijack fix reported by @okba14 in #7).

Verify your download

Expected SHA-256 of zero-breach.py:

74740af20f609f82dc6e50d66f234d0c39a20f516caa35731c2d19c11684ef44

SHA256SUMS.txt and its detached signature are attached, along with the signing key. See SIGNING.md for the full verification steps.