Patch release. CLI output polish (Flyway logging silenced; verify --bundle prints the signature verdict before the chain result; clearer offline tamper message). Also: verify --anchors now exits non-zero when a published anchor proves the ledger was truncated or rewritten, and the async ledger writer's recovery path is hardened. Libraries are on Maven Central; this jar is the CLI. Verify: SECURITY.md#verifying-a-release.