v0.2.0

Install:

specify extension add gates --from https://github.com/schwichtgit/spec-gates/releases/download/v0.2.0/gates-0.2.0.zip

The zip is the installable package (flat, extension.yml at its root); the source archives are not installable.

Verify the artifact (checksum, then sigstore keyless signature):

sha256sum -c gates-0.2.0.zip.sha256
cosign verify-blob \
  --bundle gates-0.2.0.zip.sigstore.json \
  --certificate-identity-regexp '^https://github.com/schwichtgit/spec-gates/.github/workflows/release.yml@' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  gates-0.2.0.zip

What's Changed

• docs: test-suite README, correct install URL, gitignore tidy by @schwichtgit in #16
• ci: signed release pipeline and community health files by @schwichtgit in #17
• docs: design for policy as versioned contract (003) by @schwichtgit in #18
• docs: scraper-proof contact addresses, version-agnostic support policy by @schwichtgit in #19
• feat: policy as versioned contract — inherit, prove, update, propose (003) by @schwichtgit in #24
• fix: downstream hardening — exec bits, git-boundary probe, toolchain seeding, remote check by @schwichtgit in #26
• chore: release prep v0.2.0 by @schwichtgit in #25

Full Changelog: v0.1.0...v0.2.0