Signed releases and SBOMs. Checksums are signed with keyless cosign, identifying the workflow, repository and tag that produced them. Every archive ships an SPDX SBOM.
First release. Integrity monitoring for the instruction files an AI coding agent obeys.