Stable release promoting v1.0.1-beta.1 with accumulated features and security hardening.
Highlights:
- manifest: add proc.exec capability with hardened target validation (#24)
- Enforce trust anchor for non-sideloaded installs — fail-closed publisher verification (#23)
- Harden broker + supervisor: grants, backoff, rotation, RLIMIT_AS, TOCTOU, DoS limits (#19)
- telemetry: per-app usage events from supervisor callFrom (#20)
- manifest: sideloaded-app hard-coded allow-list (#15)
- VerifyTrustAnchor gates publisher against the trusted-publisher list (#7)