Release v1.0.1 · kujolang/spec

Spec v1.0.1 is a maintenance release focused on security boundaries, reliability, performance, and reproducible CI.

Highlights

Hardened interactive YAML creation, graph-label escaping, output-path enforcement, and per-user conversion caches.
Made render and export fail clearly when the Kujo runtime fails or returns no output.
Aligned batch validation with schema limits and preserved failure exit codes at large batch sizes.
Reduced the audited 100-file validation benchmark from 39.82 seconds to 0.92 seconds.
Added SHA-256 enforcement for downloaded Kujo runtimes and checksum-pinned Kujo v1.1.0 installation on hosted Linux and macOS runners.
Removed macOS/Linux runner assumptions from tests and installation.

This is a backward-compatible patch release. The Spec contract and schema remain at v1.0.0.

Test suite: 108 passed, 0 failed.
Release quality gates: 20 passed, 0 failed.
Hosted Ubuntu/macOS CI and the Kujo artifact guard passed before release preparation.
The attached archive checksum and provenance record were verified against tag v1.0.1.