Repair descendant liveness qualification

Repair escaped launch attribution

Bind approvals to installation epoch

repair collected launch recovery across epochs

repair incident-store discovery availability

Repair terminal history pruning after boundary cleanup

Serialize owned containment with autonomous detection

Repair autonomous boundary cleanup

Repair approval admission race and boundary recovery

Repair approval revocation enforcement

fix: preserve isolated workload identity across upgrades

fix: recover installed runtime directory ownership

fix: recover interrupted lifecycle transactions

fix: restore supervisor after host reboot

release: freeze 1.0.0 candidate

feat: add bounded post-containment local lockdown

feat: add transactional 0.8.1 upgrade and recovery

fix: align installer with 0.8

feat: qualify Ollama and vLLM runtime topologies

fix: expose transient namespaces to systemd

fix: share namespace mounts with systemd workload units

feat: add selected-workload offline boundary for 0.6.0

Add native P0 qualification and release identity hardening

Fix native approval and qualification regressions

Prepare 0.5.0 release closure controls

Wait for finalized control sockets

Harden startup readiness and bounded tree capture

Repair release correctness and operational safety gates

Add aggressive Safetensors PyTorch containment profile

Add P0 supervisor self-protection

feat: add name-independent GGUF recognition

feat: add autonomous AI runtime containment

release: add reproducible real AI smoke for 0.1.2

Repair Eggcracker fail-closed lifecycle for 0.1.1

Fix CI lint portability

Initial Lumi Nutcracker 0.1.0 release candidate