v1.0

What's Changed

• Fix hermetic marketplace e2e test and CLI completion stderr noise by @mmornati in #358
• feat: response token governor (part 1): smart truncation + spill-to-resource with paged read_result (#319) by @mmornati in #359
• feat: response token governor (part 2): schema-aware field projection per tool (#320) by @mmornati in #360
• feat: response token governor (part 3): in-session dedup + local-LLM summarization (#321) by @mmornati in #361
• feat(exposure): passthrough mode for clients with native tool search (#322) by @mmornati in #362
• feat(doctor): OWASP-MCP-mapped doctor security report + local-first positioning (#323) by @mmornati in #363
• fix: get main green again (list_changed race in exposure e2e test, atomic tool-cache writes) by @mmornati in #366
• ci(test): repeat failing tests at the end of the job log by @mmornati in #365
• test(e2e): make semantic cache e2e tests hermetic to $HOME by @mmornati in #364
• feat: auditable savings report from real counters (#324) by @mmornati in #367
• test(bouncer): assert the rescan throttle by scan count, not wall-clock time by @mmornati in #369
• feat(codemode): code mode spike, sandboxed execute_code behind -tags codemode (#325) by @mmornati in #368
• Redesign documentation site with new landing page and theme by @mmornati in #370
• fix(packaging): repair installer, Homebrew auto-update and shell completions by @mmornati in #371
• fix(migrate): import the MCP configs clients actually write by @mmornati in #372
• Feed the dashboard and /metrics from the usage store; expose them on server run by @mmornati in #373
• fix(migrate): resolve staticcheck QF1001 lint failure on main by @mmornati in #374

Full Changelog: v0.11...v1.0