v0.0.2

Changelog

• 368e944 fix(release): pin cosign binary to v2.5.3 in publish workflow (#155)
• b32768c fix(bench): close review follow-ups — setup under timeout, timed-out manifest note, scoped zizmor ignores (#154)
• 467bebc docs(superpowers): close-all-axes design spec + implementation plan (#153)
• 17acd0e docs: post-merge accuracy follow-ups (cask release, task timeout, security scanners) (#152)
• 1ab8775 chore: post-merge integration — README cask, zizmor publish.yml re-audit (#148)
• 1bcc743 ci(security): comprehensive scanner suite + pin all Actions to SHAs (#144)
• 20db597 fix(bench): subprocess timeout/cancellation via context + WaitDelay (#147)
• 1ba9e26 feat(redact): harden redaction — vendor rules, entropy gate, fuzz, bypass fix (#146)
• 13273fc ci(release): GoReleaser v2 — checksums, cosign, SBOMs, provenance (#145)
• 83a9f8a chore(agents): model policy (Fable-for-quality), SECURITY.md, community files (#143)
• 64ab30c feat(e2e): accept Pro/Max subscription auth (CLAUDE_CODE_OAUTH_TOKEN) for the live gate (#142)
• 59ad8e8 feat: E2E live gate — headless claude -p full-cycle validation in CI (PV-6b as a workflow) (#141)
• 55caa64 chore(deps): Bump docker/login-action from 4.1.0 to 4.4.0 (#140)
• 847719e chore(deps): Bump actions/setup-python from 5 to 6 (#139)
• 9756084 refactor: comprehensive post-pivot dead-code sweep (−2565 LOC, zero behavior change) (#138)
• e8998cd fix+refactor+test: close all pre-existing & deferred items (post-pivot hardening) (#137)
• 15f638c docs: PV-6b live-basket calibration — regression gate validated on real claude -p (ADR-0026) (#136)
• 5af1368 fix(ci): green the Windows leg + markdownlint (path-quoting assertions; PV-6a plan doc) (#135)
• 01a873a test: PV-6a gate-power characterization + calibration report; opus-only agent rule (ADR-0026) (#134)
• 62c3c64 feat: PV-5 — residual cleanup + version watchlist (schema v5, offline drift) (ADR-0026) (#133)
• 8c446d8 feat!: PV-4 deletion wave II — remove daemon, ingest, exporters (ADR-0026) (#132)
• a1507ed feat!: PV-3 deletion wave I — drop web UI, TUI, and viewer commands (ADR-0026) (#131)