v0.1.0

Changelog

• ea13b76 Add GitHub Action wrapper, goreleaser release pipeline, CI
• a2f687e Add README, LICENSE, CONTRIBUTING; repo hygiene for public release
• 58ef531 Add pkg/parser/nsc for network_security_config.xml (MG-002 groundwork)
• 606b3f9 Build MG-002 engine: manifest + network_security_config signals
• c966c05 Build MG-003 (backup exposure) and MG-010 (debug build artifact), wire into CLI
• 8a4ef0a Build baseline mode: gate on regressions, not pre-existing debt
• 377e345 Build-order step 3: scoring, gate decision, finding_hash, output contract
• d60822c Close AndroidManifest.xml recall gap in MG-001; document native-lib scope
• 71a11d9 Close MG-001 fixture gap, add MG-002 acceptance-gate fixtures
• a199f09 Close resources.arsc recall gap in MG-001
• 10602da De-fang non-MG-001 test fixtures; document push-protection policy
• 69b5d71 Fix MG-002 manifest/NSC precedence bug
• 0e82ee6 Fix MG-003 targetSdk tiering and drop deliberate-opt-in framing
• 3f155b0 Pin MG-001 corpus batch 1: 10 varied F-Droid APKs
• f7e3908 Step 1: verified APK/manifest/DEX parsers with oracle tests
• 0183ec9 Step 2: MG-001 hardcoded-secret rule with multi-signal evidence
• 906b97b Tighten private-key-header to require an actual key body
• 801fd91 Verify MG-003's backup-override suppression instead of blindly trusting it
• f82027e Wire .mobilegate.yml policy (mode, baseline path, suppression) + Markdown formatter
• a930a75 Wire MG-002 into the CLI, run against the 10-app corpus