v1.72.0: Evidence That Ships With Its Source

Changelog

• a2a7a7d Answer the vendor risk questionnaire in one page
• 5dac54b Convert each release to Apache 2.0 after two years, not four
• f2708d3 Hold the bundle mirror to the reference corpus
• ae27045 Keep the install id when the signing key rotates
• 9b4dd0e List the continuity and vendor-risk pages in the sitemap
• b74968c Measure emitted packs by the archive, not the callback
• 2a406a5 Point the chart at v1.72.0
• 4b2989d Prove the Semaphore importer against a real current backup
• 8bd26da Say the Semaphore importer is proven against a real backup
• 926f9e0 Seat only the axis labels the chart's width can hold
• 917e78c Ship against loomseal 1.0.0
• 5132500 Ship against loomseal 1.0.0-rc.1
• ce0efe1 Stop claiming the link hashes whatever fields an entry carries