v1.0.0

Errata

This release's documentation overstates what was certified and what the product
contains. The corrections below apply to v1.0.0 as published; they do not change
the released bytes.

Certified platforms. The README lists Windows x64 and Linux x64 as certified
v1 platforms. Only Windows x64 was certified. The certification report included
in this release states that Linux certification was deferred, and no Linux
certification run was completed.

"Fully local". The README and the accompanying marketing material describe
the product as running with no cloud service. The control plane, durable state
and verification runner are local, but the four read-only role endpoints are
configured by the user and may be remote. Depending on the phase they receive the
original request, project context, the candidate digest or its content, raw
evidence and verdict material.

Verification commands. The threat model describes the managed worktree as
containing the blast radius of a project verification command. A worktree
isolates Git state, not operating-system authority. In this version a command
declared by the verification plan runs with the local account's privileges, with
no consent gate and no operating-system sandbox. Do not run cycles against
repositories you do not intend to build.

500,000-file benchmark. The certification report records a cold index of
62.1 minutes against the benchmark's own 30-minute gate, and reports the overall
result as a pass with a documented exception. The gate did not pass. The
incremental refresh figure (34.9 s) is unaffected.

v1.0.1 addresses each of these — an expiring, single-use consent receipt for
verification commands that are not preapproved, corrected platform labels and
data-flow disclosure, and a cold index that meets the unchanged gate. It is not
yet released.