Deadbolt v1.0.1

Deadbolt v1.0.1 is a documentation and distribution maintenance release. Admission, state, protocol and public API behavior remain unchanged from v1.0.0; dependencies are unchanged.

The native archives now include the evaluator brief, observable Hermes demonstration runbook and scoped application pilot worksheet. The legacy Harness-specific overview and cancellation comments are corrected: standalone Deadbolt revokes subsequent admissions, while the executor owns cancellation of running work. Disabled/fail-open Rust configurations are explicit in the documentation.

The repository has a compact README, pinned source installation, linked CI/release/license badges, structured bug/integration forms and verified-enabled private vulnerability reporting. CI now builds Rust API documentation with warnings denied on Rust 1.85.

Four native targets are available: Linux x86_64 (Ubuntu 22.04/glibc validation), Windows x86_64 (GitHub Windows runner), macOS arm64 and macOS x86_64 (macOS 15 validation). Archives are unsigned and Mac binaries are unnotarized. Verify SHA-256, extract, then run deadbolt --version and deadbolt drill. Every archive includes BUILD.json, source, tests, client examples, license notices and the unmodified MPL dependency source.

Final release checks include platform/MSRV source CI, extracted native drills, Python/Node contracts with backup/restore, pinned Hermes MCP acceptance with 13 observable effects, and the tested original-state upgrade. Attached acceptance reports identify the tested executable hashes.

Start with the evaluator brief, installation, demonstration and pilot checklist.

Boundaries remain explicit: the trusted executor must route each protected action through fresh admission and execute only on allow. Kill does not cancel a running body. Spend/destination are caller-supplied. The sidecar token authorizes all exposed routes. The selected Hermes MCP route does not cover built-in terminal/browser/delegation or a full model turn. Systemd remains experimental. No registry package, security certification or Hermes endorsement is claimed.

Release source: 6b61bc9485eccea90cc2766d3e76fde6522fed82. Source CI and native packaging, Hermes acceptance and upgrade validate the exact merged source.

The downloaded macOS arm64 executable also passed the same 13 Hermes MCP effects locally; its attached report matches the archive executable hash.