Added

fragcap targets discover now reports automatic eligibility and supports a privacy-safe count-only summary. fragcap targets reconcile previews legacy tool-owned residue and removes only confirmed, exact, unchanged rows in one transaction.

Windows uninstall now offers an unchecked current-user fresh-start choice backed by exact canonical-root inventory and confirmation, Doctor-owned Deep Capture recovery, active-owner and reparse-safe retention, truthful partial reporting, explicit silent properties, and a separate preview-bound all-users administrator flow. Ordinary uninstall and maintenance continue to preserve user data.

Deep Capture now displays one complete immutable session plan and accepts only an interactive decision or the exact plan identifier from dedicated standard input before any session effect.

Deep Capture now explains active-mode, trust, sensitive-output, retention, and recovery consequences beside its complete authorization plan, shows truthful native lifecycle progress and delivered-observation counters, and retains exact outcome, artifact, and cleanup guidance under quiet output. JSON and consent authority are unchanged (issue #332).

Current native product guidance, parser-checked documentation examples, a reproducible independent-review handoff, and fresh-release preparation now cover the complete implemented workflow while retaining explicit security-review and feature-completion gates.

• 2026-09-05: Add a closed native supply-chain gate over all-feature Windows and Linux graphs plus the exact shipped Windows closure. Pull requests now block on fresh advisory, yanked, abandoned, unsound, license, source, compatibility-line, feature, target, MSRV, critical-pin, review-cadence, unsafe-review, and finite-exception policy. Release ZIP and MSI payloads now embed independently validated CycloneDX 1.5 and complete third-party notices generated from exact-pinned tools.

• 2026-09-05: Add blocking final Windows package certification over the exact ZIP, MSI, standalone catalog, and checksum bytes. The certified native build identity, six-file payload, size ceilings, PE machine and imports, unsigned Authenticode state, constrained loopback smoke, install, repair, exact-byte reinstall, v0.8.0 upgrade, downgrade refusal, uninstall, user-state preservation, and exact cleanup must all reconcile before release publication.

• Add a versioned stable Deep Capture Rust API with checked session and adapter builders, explicit cooperative cancellation, standard Rust error interoperability, a reviewed compatibility inventory, and a runnable production-native loopback example that needs no CLI or trust change.