v0.1.0

• docs: restructure README header with nav and skill install (4ce659a)
• docs: add header image to README (0c986ec)
• docs: clarify --expect is verdict-only and how to gate exit codes (da63dd1)
• fix: warn on unredactable literal secrets and enforce 0600 on evidence files (ebc3749)
• docs: lead with a spec-agnostic agent prompt; drop em dashes (0514c8b)
• feat: spec-less exploratory mode + README revamp (606f67b)
• feat: finalize agent API testing release (ee7d01e)
• feat: enforce trustworthy test run semantics (b99e432)
• fix(executor): enforce release safety limits (9c4efc3)
• fix(spec): harden remote OpenAPI loading (1b8e054)
• fix(session): isolate runs and secure vars (a25b66e)
• docs: polished README + add endpoints/schema/security docs topics (8aaaf33)
• chore: drop unused import in schema-command (84d01e4)
• feat(endpoints,schema): cap output for context-window safety on large APIs (e019550)
• feat: security probes (invalid-auth, raw-data) + server-error verdicts (e228e7c)
• feat(verdict): bake in ok + summary; readable call output; --expect precedence (5436837)
• fix(redaction): preserve request/query shape in evidence log, mask only secrets (a96a79a)
• feat(init): default --base-url to spec servers[0].url when omitted (93b9217)
• feat: drop report --upload; auth stays optional for attribution only (36bfc6d)
• feat: implement full MVP command surface (init, sweep, call, coverage, report) (cd8ae11)
• ci: use node 22 (pnpm 11 requires >=22.13) (16f06eb)
• feat: scaffold CLI with auth, status, and shared infra ported from ta (2cdd662)
• chore: initial commit (50547e4)