Add safe stale-fork recovery to hosted proof (#49)

Keep successful hosted proof output concise

Show hosted proof result at terminal end

fix: verify hosted proof completion

feat: follow hosted proof to result

Rebind hosted proof to 1.0.10 sources

Release Lumi Eggcracker 1.0.10

Retry new fork readiness before hosted proof (#43)

Repair descendant liveness qualification

Repair escaped launch attribution

Bind approvals to installation epoch

repair collected launch recovery across epochs

Print a hosted-proof result command (#42)

repair incident-store discovery availability

Print a hosted-proof watch command (#41)

Clarify the hosted-proof result handoff (#38)

Make hosted proof run links correlation-safe

fix: restore hosted proof identity validation

Repair terminal history pruning after boundary cleanup

Serialize owned containment with autonomous detection

Repair autonomous boundary cleanup

Repair approval admission race and boundary recovery

Preserve newly terminated run history

Link autonomous incidents to owned workloads

Serialize autonomous kill lifecycle state

Repair approval revocation enforcement

Add one-command hosted containment proof (#28)

fix: make argv artifact probes nonblocking

fix: prevent FIFO descriptors from blocking discovery

fix: reserve workload names after termination

fix: reject duplicate public identifiers

fix: bind approvals to resource limits

fix: deny approval inheritance to complete descendants

fix: bind topology approval to its live anchor

fix: publish terminal state before containment receipts

fix: publish autonomous terminal state atomically

fix: keep release diagnostics portable

fix: preserve isolated workload identity across upgrades

fix: detect loader-accepted duplicate safetensors keys

fix: restore supervisor after host reboot

fix: bound diagnostic history replies

fix: avoid redundant process-tree stops during storms

fix: keep incident queries within protocol bound

fix: size incident ledger for native campaign

fix: bound concurrent incident response state

fix: defer discovery enforcement overflow

fix: prevent direct AI approval inheritance

fix: keep recurrence durable at receipt cap

release: freeze 1.0.0 candidate

fix: tolerate restricted health and recovery contexts