release: implement site registry v0.4 trust pipeline

CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## 0.4.0 - 2026-09-13
+
+- Add typed full/partition/delta source coverage, active-record masking, a
+  receipt-bound coverage digest, active export and complete audit export.
+- Separate name, website-edge and entity-equivalence identities so aliases cannot
+  inherit routes and unrelated metadata does not invalidate stable edges.
+- Replace latest-review admission with authenticated, policy-bound reviewer votes,
+  independent identity/group/physical-key quorum, trusted writer acceptance time,
+  bounded expiry, risk-class threshold overrides and sticky explicit revocation
+  supersession.
+- Bind strict reviewer trust roots and review policy into releases and enforce
+  publisher identity and physical-key separation.
+- Store immutable subject-bound observation batches and add exact/reverse lookup,
+  bounded DNS-pinned candidate observation, cache-only replay and structured HTTP,
+  redirect, canonical, hreflang, JSON-LD, sitemap, country, DNS, TLS and failure
+  evidence.
+- Add deterministic evidence bundles, risk-ordered review queues, drift classes,
+  revocation-candidate export, schema migrations 4 and 5, 0.3 compatibility
+  guidance, architecture decisions and strict end-to-end security fixtures.
+- Add publisher-signed cumulative emergency revocation feeds with seven-day
+  freshness, rollback-safe continuity, block-only application to older compatible
+  registries, and reinstatement validation against an exact full generation.
+- Add safe scheduled typed-snapshot supersession and a serialized, bandwidth-capped
+  observer service; reject compressed bodies, redirect loops and duplicate update
+  coordinates before acquisition.
+
 ## 0.3.0 - 2026-09-13
 
 - Snapshot authenticated SQLite bytes into a private file before queries and sign