0.1.2 release record

Status: security and publication-boundary patch

0.1.2 removes private host-application implementation, rollout, and commercialization records from the public documentation and source distribution. It contains no runtime, public API, schema, or serialized contract change from 0.1.1.

The release verifier now scans the complete public source tree and both built distributions for normalized fingerprints of private publication context. Regression coverage proves that case, punctuation, whitespace, HTML entities, and HTML comments cannot trivially bypass that check.

Release gates

• [x] The remediation commit is contained in both develop and main.
• [x] The public documentation no longer serves or indexes the removed pages.
• [ ] Signed v0.1.2 tag passes the complete artifact matrix.
• [ ] TestPyPI serves artifacts matching the CI-built SHA-256 digests.
• [ ] PyPI serves the same verified artifacts.
• [ ] GitHub release records the artifact digests and provenance.

Historical 0.1.1 artifacts are immutable. This patch makes the sanitized source distribution the latest supported release; it does not claim to erase copies already downloaded or retained by third-party caches.