v0.3.0 — Visible agency + external-agent onboarding

Release wave since v0.2.0 (64 commits). All live at keryx.cc, real settled USDC on Arc testnet.

✨ New visible features

• Live budget meter in the reasoning console — watch the agent spend against its authorized budget in real time as it buys sources and pays creators per citation, and see it stop early with USDC unspent. The cap is enforced in code, not by the model; now it's visible.
• "Call Keryx from your own agent" card on the dashboard — copy-paste the exact x402 call (free inspect + circle services pay) so any agent can pay Keryx and have it research + pay the creators it cites downstream.

🔒 Hardening

• Every public spend path capped + IP rate-limited: anonymous /api/ask (treasury) budget clamp, A2A /api/agent/ask budget clamp, /api/cite reward ceiling — the live treasury can't be drained or volume faked.
• Demo-path hardening pass: settlement-loop guarded (one failed toll no longer kills a run), resilient LLM engine (retry → heuristic fallback), branded error/SSE-disconnect states.

🌐 Platform

• Non-custodial browser co-sign session-payment path made reliable end-to-end (deposit → activate → pay → settle).
• On-chain SourceRegistry catalog published with verifiable provenance (ArcScan-verified).
• A2A endpoint discoverable — serves the x402 challenge on GET so circle services inspect reports it payable.
• 24/7 traction daemon; honest external-vs-engine volume split on the dashboard.

Full detail: docs/project-changelog.md.