v0.2.4

Correctness and craft. No breaking changes.

Container image: docker pull ghcr.io/sylvester-francis/leash:0.2.4

Added

• Windows single-governor lock (#25). The SQLite flock guard that stops two serve processes from double-governing a ledger is now enforced on Windows via LockFileEx, exercised on real Windows in CI. Implemented through the standard-library syscall package: no new dependency.
• Contributor documentation: ARCHITECTURE.md (layering, request path, invariants), architecture decision records under docs/adr/, and COMPATIBILITY.md (the stability contract). Plus property-based tests and a ledger fault-injection harness guarding the core invariants.

Fixed

• Idempotent ledger appends (#26). A durable write that commits but returns an error to its caller is no longer re-recorded on retry, so a call cannot be counted twice.

Verify

Every artifact is cosign-signed with SBOM and SLSA provenance; see docs/security-model.md.