v1.0.14

Changelog

• 3c5b497 docs(sprint): add v1014-rc1-qa-fixes master plan + FX1 design
• c43a991 docs(sprint): cli-ux-permission-model completion report
• 4704bec docs(sprint): v1014-rc1-qa-fixes sprint report (closeout)
• 104e3c1 feat(F1): vault metadata read API + schema v2 preview migration
• 109b73e feat(F2): declarative permission tier model + panic-on-missing dispatcher
• 58284d2 feat(F3): list reads preview column directly (no unlock, no decrypt)
• 412dfb6 feat(F4): audit log entry per CLI command tagged with permission tier
• e91e538 feat(F5): tene permissions info command + README/CHANGELOG/SECURITY.md updates
• f5827e3 feat(F6): one-time stderr notice when keychain falls back to file-keystore
• edf24f9 feat(F7): init success output adds 3-line permission + preview hint
• bbfb4ec feat(F8'): audit show --resource flag + doc drift cleanup
• ae7e676 feat(F8): audit log management — tail/show/prune + 50MB threshold notice
• 73ddd63 fix(auth,cli): dispatch hook skips synthetic verbs, ValidateStrict catches reverse drift (B4, B5)
• df8a494 fix(ci): errcheck wrap + G10 chokepoint comment cleanup
• 9ca4c4b fix(cli): destructive ops fail-closed on non-TTY (B2, B9, I-12)
• 7bcdbd0 fix(cli): polish — list --quiet, plurals, config key normalisation, --dir error, passwd docs (B7,B8,B10-B13)
• 45b6d68 fix(cli): tene run --help shows help text (B6)
• b772095 fix(keychain): --no-keychain stops sharing ~/.tene/keyfile (B1, I-11)
• 4aedbc3 fix(update): SemVer-aware update check, no RC→stable downgrade (B3, I-13)