Agent+ 0.3.0

Agent+ 0.3.0 adds two reviewed public capabilities for controlled project operation.\n\nHighlights:\n\n- Prospective outcome auditing with first-pass success, eventual success, late-defect, duration, retry-efficiency, failure-concentration, Wilson interval, and explicit abstention reporting.\n- A fixed private-evidence receipt interface that rejects omission, substitution, traversal, symlink, tamper, duplicate, non-JSON, FIFO, socket, device, and unexpected-file attacks.\n- Exact-byte legacy-project admission through the adopt command without overwriting project-owned controls.\n- A fixed project startup-check seam with nonblocking descriptor-bound execution.\n- Exact 13-file managed-manifest enforcement across canonical status and doctor plus copied doctor and context consumers.\n- Audit-first synchronization guidance from an exact official tag.\n\nRelease validation:\n\n- 128 public-package tests passed.\n- Outcome-audit integrated review passed 25 of 25 attacks and 15 of 15 coverage items.\n- Legacy-adoption integrated review passed 13 of 13 attacks and 15 of 15 coverage items.\n- Public safety, canonical/bootstrap bindings, internal links, compilation, shell syntax, and exact release-scope checks passed.\n\nAgent+ does not grant scientific, modeling, promotion, live-execution, or consumer-project authority. Consumer synchronization remains a separate owner-authorized operation from this exact release.