main
repo-2.0: Persistent naming, drop auto_capture, honest multi-agent doc, demo boots clean
fix(time): always emit microseconds in UTC timestamps
fix(provenance): an artifact could still name a Merkle root the tree never had
chore: repository hygiene pass
fix: cp1251 (Russian-Windows) portability for the hash path and CLI
docs: restructure ROADMAP into Next / Later / Not-ours; align v2.0 framing
demo: recover scrambled leaf-ids + stop --live running a silent ablation
fix(plugin): a shared message promised a fallback only one of its two callers performed
fix(windows): Unix-only fcntl import + encoding walls block the Advocate demo on Windows
refactor(provenance): remove private-system references from the public surface
feat(provenance): append-only provenance ledger (no hash chain, by decision)
refactor(display): derive every status-bearing element from the value it describes
docs: honesty pass — 13 ratified corrections, and move signing keys out of the tree