ghostguard v0.1.0

Record-first gateway, fail-closed policy, approvals and audit for any agent — the GhostGuard core engine (TypeScript, zero runtime dependencies), plus the Cloud audit/approvals skeleton, the Jev bridge integration, and shared conformance fixtures.

Verified at release: npm run verify — build + strict typecheck clean; 9/9 acceptance, 3/3 build smoke, 12/12 conformance, 20/20 cloud e2e.

By Ghost Developer Studio — part of the GhostGuard family (core: https://github.com/littlestjames82-sys/ghostguard). MIT licensed.

Note: the publish-npm workflow attached to this release is expected to fail at the npm publish step until the package exists on npm — the first npm publish is a manual step by the owner, after which Trusted Publishing (OIDC) takes over for future releases.