v0.3.0

Changelog

• 1d29690 Merge pull request #10 from yebiguo/v0.3-tamper-evident-receipts
• b3aa21d Merge pull request #11 from yebiguo/v0.3-day2-signing
• a1606f1 Merge pull request #13 from yebiguo/codex/v0.3-release-prep
• 3fb4391 Merge pull request #8 from yebiguo/docs/post-v0.2-cleanup
• be4949e Merge pull request #9 from yebiguo/test/format-status-direct-coverage
• dad474a docs: align v0.3 tamper-evidence guarantees
• eeebb53 docs: fix staleness left over from the v0.2.0 ship
• 9ab1816 docs: stop the release-prep step from going stale at every release
• b86e2ce release: prep v0.3.0 action pin
• fe2412e v0.3 Day 1: local signing key management for tamper-evident receipts
• c635567 v0.3 Day 2: sign CheckResult on write, verify on read, bump schema to proofrun/v2
• c5bfb0a v0.3 Day 3: CLI-level adversarial test for the hand-edited-receipt scenario
• 244a8aa v0.3 Day 4: docs, orphan-check regression test, Roadmap reorder
• bc1b6da v0.3: fix 2 SHOULD FIX from review — secret git-exposure + symlink write-through
• 9e72235 v0.3: fix MUST FIX — a symlinked .proofrun parent let a known key sign real results
• c74105e v0.3: fix SHOULD FIX — a symlinked .proofrun/ itself bypassed every file-level defense