feat: harden reviewed registry releases

CHANGELOG.md

@@ -0,0 +1,23 @@
+# Changelog
+
+## 0.2.0 - 2026-09-13
+
+- Open generations from an authenticated immutable SQLite file descriptor and
+  reject sidecars, symlinks and unexpected generation files.
+- Authenticate exact reviewer decisions with SSH signatures, retain their proofs
+  and re-verify every decision before release signing.
+- Explain resolver abstentions with typed statuses and decision counts.
+- Add exact entity, URL/domain, source-separated popularity, redacted category and
+  registry-statistics audit views.
+- Stream typed diffs across source selections, projections, decisions and explicit
+  equivalences.
+- Add bounded native evaluation with multilingual, regional and deceptive-query
+  regressions plus latency evidence.
+- Normalize rights-bearing future crawler observations without admitting them as
+  identity or ownership evidence.
+
+## 0.1.0 - 2026-09-12
+
+- Initial independent extraction with five rights-reviewed source adapters,
+  deterministic normalization, immutable generations and conservative regional
+  resolution.