v1.0.1

Stable release promoting v1.0.1-beta.1 with accumulated features and security hardening.

Highlights:

• manifest: add proc.exec capability with hardened target validation (#24)
• Enforce trust anchor for non-sideloaded installs — fail-closed publisher verification (#23)
• Harden broker + supervisor: grants, backoff, rotation, RLIMIT_AS, TOCTOU, DoS limits (#19)
• telemetry: per-app usage events from supervisor callFrom (#20)
• manifest: sideloaded-app hard-coded allow-list (#15)
• VerifyTrustAnchor gates publisher against the trusted-publisher list (#7)

v0.1.0

Initial public release.

Pilot Protocol app store plugin — supervisor, broker, lifecycle audit.

License: AGPL-3.0-or-later.