Axon v0.3.0

What's Changed

• share-mount cloud-sync hardening + sealed-mount design (#51-#54) by @jyunming in #55
• sealed-mount Phase 1: crypto + keyring primitives by @jyunming in #56
• feat(sealed): Phase 2 — sealed-store backend integration (#57) by @jyunming in #58
• feat(sealed): Phase 3 — sealed share generate + redeem (#57) by @jyunming in #59
• feat(sealed): Phase 4 — soft + hard revocation (#57) by @jyunming in #60
• feat(sealed): Phase 5 — cross-interface sharing surfaces (#57) by @jyunming in #61
• feat(sealed): Phase 6 — passphrase fallback for headless / no-keyring (#57) by @jyunming in #62
• feat(sealed): Phase 7 — three-tier sync test strategy + smoke recipe (#57) by @jyunming in #63
• style(vscode): collapse spurious blank lines in TS + JS sources by @jyunming in #64
• style(python): collapse spurious blank lines across src/axon/ by @jyunming in #65
• docs: codebase audit 2026-04-26 (12-agent parallel investigation) by @jyunming in #66
• fix(audit): address P1+P2 audit findings + doc fixes by @jyunming in #67
• feat(security): SecretStr passphrases + body/upload size limits by @jyunming in #69
• feat(retrieval): sparse retrieval Phase 1 (SPLADE) (audit E1) by @jyunming in #68
• feat(observability): split /health endpoints + add /metrics (Prometheus) by @jyunming in #70
• feat(logging): structured logging with request_id contextvar by @jyunming in #71
• feat(crypto): streaming SealedFile.write_stream removes 1 GiB memory ceiling by @jyunming in #75
• feat(security): per-IP rate limiting on share/ingest/security endpoints by @jyunming in #72
• feat(sealed): per-share KEK persistence + selective DEK re-wrap on hard revoke by @jyunming in #74
• test(agent): 75-test suite for agent.py (was 0 dedicated tests) by @jyunming in #76
• feat(sealed): mount_refresh_ttl_s config + per_query staleness wired into query path by @jyunming in #78
• docs: ADMIN_REFERENCE.md rewrite + doc cleanup sweep (F1+F2) by @jyunming in #77
• feat(parity): surface parity sweep — 7 features across MCP+REPL+CLI+VSCode by @jyunming in #73
• feat(sealed): Phase 7 — smoke doc + integration tests + mark phases 2-4 shipped by @jyunming in #79
• docs: restructure sharing guides — SHARING.md + move planning docs by @jyunming in #80
• docs: add SPLADE sparse retrieval + HTTP 429/413 error entries by @jyunming in #81
• docs: API_REFERENCE missing endpoints + ADMIN_REFERENCE missing config fields by @jyunming in #82
• docs: update MCP_TOOLS.md to all 46 tools + fix README counts by @jyunming in #83
• feat(sealed): cross-platform key portability dual-write master.enc by @jyunming in #84
• docs: sealed sharing discoverable in README + v0.3.0 changelog by @jyunming in #87
• feat(sealed): grantee DEK file fallback for headless Linux by @jyunming in #85
• feat(security): harden Windows NTFS cache wipe + passphrase minimum length by @jyunming in #88
• test(sealed): E2E sealed-share roundtrip — owner seals+shares, grantee redeems+queries by @jyunming in #86
• fix(copilot): address all Copilot findings from PRs #85-88 + fix CI (29 broken tests) by @jyunming in #89
• fix(copilot): address findings from PRs #70-71 #79-81 + fix CI + add logging tests by @jyunming in #90
• fix(copilot): sealed share CLI/REPL routing + remaining PR #79-83 findings by @jyunming in #91
• chore(release): bump version to 0.3.0 by @jyunming in #92

Full Changelog: v0.2.1...v0.3.0