Kotoba CLI v0.7.3 — signed native packages and Passkey identity

Kotoba CLI v0.7.3

This is the first Kotoba CLI release published as a complete, signed native package set for macOS and Linux.

Identity

• kotoba id new starts the canonical Passkey device authorization flow without requiring MetaMask or another browser wallet.
• kotoba id show --json reads the enrolled Stable Principal from the local CLI profile.
• The Stable Principal is chain-neutral. Base and other chain accounts remain explicit linked accounts rather than the root identity.

Release integrity

• Native, JVM-free binaries for darwin-arm64, darwin-amd64, and linux-amd64.
• SHA-256 checksum and machine-readable build evidence for every archive.
• Ed25519-signed implementation release envelope for every platform.
• Source commit: d9c3c8d5eca2e7632a8a665fea0522f55dd46683
• Source tree: 4f1408f6c19200c97014e26484f1a94a31eaffc9

Changes

• Fix native-image compatibility by creating cryptographic randomness at operation time instead of capturing a SecureRandom instance in the image heap.
• Document the native installer and Homebrew as the supported package routes; an npm package is not published.
• Keep the language surface unchanged: Language Profile 6 and Package Contract 1.

All 686 tests / 9,478 assertions passed before each platform build, followed by native binary and compiler smoke verification.