v1.1.0

PackWrite 1.1.0 is the official hardening and automation release.

Highlights

• Adds the read-only packwrite summary command.
• Adds machine-readable --json output for summary, validate, and doctor.
• Adds init --quiet for scripting while preserving visible errors.
• Hardens output staging, nested output promotion, symlink boundaries, configuration
  validation, endpoint handling, raw-response storage, and model-output resource limits.
• Cleans stale PackWrite work directories conservatively while preserving the sole
  recovery backup after an interrupted promotion.
• Adds a committed golden agent-pack fixture and expands the offline suite to 182 unit
  and 66 CLI integration assertions.
• Runs hosted CI with a checksum-pinned Kujo v1.1.0 release binary and commit-pinned
  GitHub Actions.
• Keeps the installed launcher self-contained with standalone Kujo release binaries.

Compatibility notes

Normal PackWrite manifests and supported configuration remain compatible. Inputs that
previously relied on unsafe coercion, embedded endpoint credentials, symlinked output
ancestors, reused raw-response filenames, or oversized generated packs now fail with
explicit safety errors.

Verification

The release commit passed local Kujo checks, Bash syntax checks, the full offline test
suite, smoke tests, GitHub Actions CI, and the Kujo-tool artifact guard before tagging.

See CHANGELOG.md and docs/audits/repository-hardening.md for the detailed record.