TermPilot v0.4.0

Commercial completeness, minus signing (deferred by owner decision).

Added

• Linux distribution matrix complete: AppImage + deb + rpm join the
  tar.gz (toolchains installed in the release pipeline).
• Split panes resize by dragging the divider; pickers navigate with
  arrow keys.
• Session log archive UI in settings (list/download/delete).
• Passphrase-wrapped encrypted export/import (PBKDF2 250k -> AES-GCM,
  self-describing container).
• FIDO2 hardware key generation options (ed25519-sk / ecdsa-sk).
• COMMERCIAL-CHECKLIST.md — the launch gates, signing deferred.

TermPilot v0.3.0

The commercial-polish release: a designed system under the tool, and
the update chain.

Added

• Design tokens: 4pt spacing grid, type scale (caption/body/title),
  semantic surface layers, consistent radii.
• Control system: primary/quiet/danger button hierarchy with designed
  hover/pressed/disabled states; global keyboard focus ring.
• Materials: modal dim+blur and entrance motion; toast notifications;
  promise-based in-app confirm dialogs replace window.confirm/alert.
• Updater: notify-and-open — the release pipeline publishes an update
  manifest to termpilot.jrtx.site, the app checks it (1 h cache,
  semver compare) and offers a dismissible banner. Silent auto-install
  waits for the 1.0 signed chain.
• M2 additions: snippet groups + broadcast run, key import and
  public-key distribution, session summary, failure-evidence export,
  session logging to file.