v0.3.0

0.3.0 (2026-06-12)

Features

• deploy: reference deployment — kustomize, kind demo, blast-radius consumer (#29) (68d7535)
• domain: pluggable transform-step registry (+ setTimezone, discriminated-union schema) (#26) (3aad9dd)
• image transform / hardening — the rebuild path (Phase 6) (#24) (79e9dfa)
• make the reconcile path runnable — bundle regctl + per-registry TLS/CA (#27) (de46501)
• reconcile: structured two-stream output + per-policy resilience (#25) (1aa22f2)

Bug Fixes

• image: run runtime image as non-root (uid 65532) (#30) (409b0fe)

Documentation

• architecture: VS Code launch config for Structurizr C4 viewer (#22) (53e2ad3)
• specs: SLSA / in-toto attestation design — the heavy-provenance layer (#28) (5f36c15)