switchpost v0.7.0 — the rename, the agent skill, 271 commits of hardening

v0.7.0 — switchpost: the rename, the agent skill, and 271 commits of hardening

This is the first release under the new name. The repo, crate, CLI, and daemon are now switchpost (ex-social-forge; the folder and GitHub repo were renamed 2026-10-26). One Rust binary, 25 platforms, driven by CLI, REST, or MCP — on your own hardware, SQLite-embedded since v0.3.0.

Since v0.3.0 (2026-10-01, 271 commits):

• The rename, finished. social-forge → switchpost across the code surface, tests, and the agent skill; served page, service file (switchpost.service), and installer all carry the new name.
• The agent skill, red-teamed three times and behaviorally evaluated. v0.5.0 rebuilt the skill (two-ID-systems conflation fixed, every workflow covered); v0.6.0 fixed three CLI agent-surface defects; the behavioral eval measured with-skill 100% vs old 79% (8 runs); v0.6.6 added the 20-query trigger-eval set; v0.6.7 deep-validated every eval run (mutation audit: zero platform mutations across all 8 transcripts).
• Browser-OAuth hardening and the mcp-call toolset-reach fixes (v0.4.5); CSRF port-drift guard (v0.4.4); FRONTEND_URL boot warning when it does not cover the serve port (v0.4.3).
• CLI completeness work the interrupted session verified but never committed (v0.4.2), plus four full-suite validation defects fixed (v0.4.0).
• MCP streamable-HTTP on the daemon — POST {APP_URL}/mcp behind the existing auth; tokio features narrowed from full to the nine actually used; DST-correct zone-name day bucketing.
• Frontend: SvelteKit static build embedded via rust-embed.

Upgrade note: SQLite-only since v0.3.0 (Postgres removed). Your existing SQLite file keeps working; stop the daemon, swap the binary, restart.

Build note: built locally on linux/x86_64-musl with cargo-zigbuild (the release workflow's CI legs could not run — GitHub Actions startup failures on this account). The v0.3.0 asset shape is preserved: a single switchpost-linux-x64 binary.