v1.0.0

What's Changed

• spec: add JCS canonicalization, golden coverage, and integrity verify by @negillett in #43
• Add CI workflow, DCO check, NOTICE, and CONTRIBUTING by @negillett in #44
• spec: add semantics/reasons.json vocabulary and validator by @negillett in #45
• Tighten schemas: close finding/manifest, add policy mutexes and ISO-8601 durations by @negillett in #46
• docs(reasons): reference public policy schema for rule grammar by @negillett in #47
• docs: issues welcome, maintainer-only pull requests by @negillett in #48
• Close finding.reason enum against reasons vocabulary by @negillett in #49
• Temporal duration_invalid and category-aligned unsupported reasons by @negillett in #50
• Finding reason: unknown unsupported rule category by @negillett in #51
• feat(semantics): seed authored copy for demo-blocker reasons by @negillett in #52
• Add signed object provenance classes by @negillett in #53
• Add agent manifest schema by @negillett in #54
• Add webhook finding schema by @negillett in #55
• feat(spec): add reference policy skeleton by @negillett in #56
• Add refund-basic reference pack by @negillett in #57
• Add refund-with-ledger reference pack by @negillett in #58
• Add refund-with-notification reference pack by @negillett in #59
• Add capture-settlement reference pack by @negillett in #60
• Add dispute-evidence reference pack by @negillett in #61
• Add high-stakes tool-use reference pack by @negillett in #62
• Add eval-gate reference pack by @negillett in #63
• Add budget-bounded reference pack by @negillett in #64
• Add break-glass reference pack by @negillett in #65
• Add production-deploy reference pack by @negillett in #66
• Add customer-sla reference pack by @negillett in #67
• Add etl-completeness reference pack by @negillett in #68
• ci: add spec release signing dry run by @negillett in #69
• Standardize GitHub Actions check names by @negillett in #70
• docs: add security reporting policy by @negillett in #71
• Add compatibility matrix bootstrap by @negillett in #72
• Add multi-agent delegation attributes on execution events by @negillett in #73
• Enforce 95% Vitest coverage in spec CI by @negillett in #74
• Add spec release workflow with Cosign manifest co-signature by @negillett in #75
• Fix cosign artifact paths in spec release bundle by @negillett in #76
• Add counterparty golden bundle for offline verify by @negillett in #77
• Pin counterparty golden CI to tools main by @negillett in #79
• Add CodeQL and secret scanning CI gates by @negillett in #78
• Add dependency vulnerability scan CI gates by @negillett in #80
• Add JCS canonicalizer fuzz seed corpus by @negillett in #84
• Add fuzz seed corpora for verifier, bundle, policy by @negillett in #85
• Add ingest fuzz seed corpus by @negillett in #86
• Add CI-parity local coverage gate script by @negillett in #87
• Add security-advisory-publish workflow caller by @negillett in #88
• Link SECURITY.md to public SECURITY-POLICY.md by @negillett in #89
• Add public readiness docs for spec repo by @negillett in #90
• Add golden demo Stripe webhook fixtures by @negillett in #92
• Add golden demo refund scenario fixtures by @negillett in #93
• Adopt tiered coverage gates by @negillett in #94
• Add ecosystem pin contract and verification by @negillett in #95
• Bump OSS-Fuzz core and tools pins in manifest by @negillett in #96
• Extend compatibility matrix schema with Go SDK row by @negillett in #97
• Verify current matrix row matches pins manifest by @negillett in #98
• Document matrix tuple update paths and PR checklist by @negillett in #99
• Add ecosystem conformance workflow and SDK golden by @negillett in #100
• Wire adapter and bundle profile ecosystem checks by @negillett in #101
• Bump pins tuple after Phase 4 merge by @negillett in #102
• Simplify CI to build and test only by @negillett in #103
• Add v0.1 local contract documentation by @negillett in #104
• Bump the github-actions group across 1 directory with 5 updates by @dependabot[bot] in #91
• Bump @types/node from 25.7.0 to 25.9.1 in the minor-major-updates group across 1 directory by @dependabot[bot] in #83
• Bump the patch-updates group across 1 directory with 2 updates by @dependabot[bot] in #81
• Pivot to MIT license and OSS-facing docs by @negillett in #105
• Remove TRADEMARK, SECURITY, and NOTICE by @negillett in #107
• Use neutral product language in public docs by @negillett in #106
• Trim obsolete spec tooling for OSS pivot by @negillett in #108
• Align pins and matrix to current spec main by @negillett in #109
• Align pins and restore OSS drift protection by @negillett in #110
• Enforce SDK SOURCE_REF in pins, matrix, and CI by @negillett in #111
• Align SDK pins to merge commits on main by @negillett in #112
• Restore spec release workflow for v0.1 tags by @negillett in #113
• Fix spec release upload job git context by @negillett in #114

Full Changelog: https://github.com/IntentProof/intentproof-spec/commits/v1.0.0