Repair descendant liveness qualification

Repair escaped launch attribution

Bind approvals to installation epoch

repair collected launch recovery across epochs

repair incident-store discovery availability

Repair terminal history pruning after boundary cleanup

Serialize owned containment with autonomous detection

Repair autonomous boundary cleanup

Repair approval admission race and boundary recovery

Repair approval revocation enforcement

fix: reject duplicate public identifiers

fix: bind approvals to resource limits

release: freeze 1.0.0 candidate

feat: add bounded post-containment local lockdown

feat: add transactional 0.8.1 upgrade and recovery

feat: add sealed execution boundary

feat: qualify Ollama and vLLM runtime topologies

feat: add selected-workload offline boundary for 0.6.0

Prepare 0.5.0 release closure controls

Add aggressive Safetensors PyTorch containment profile

Add P0 supervisor self-protection

feat: add name-independent GGUF recognition

feat: add autonomous AI runtime containment

release: add reproducible real AI smoke for 0.1.2

Repair Eggcracker fail-closed lifecycle for 0.1.1

Initial Lumi Nutcracker 0.1.0 release candidate