# Changelog

## 0.1.0 - 2026-09-28

First public release under MIT.

- `keyVerdict()` checks a signing key at both origin and arrival;
  `expired-in-flight` is its own verdict, accepted and recorded.
- Revocation applies regardless of origin time.
- `assessStream()` returns `apply` in sender-sequence order, never arrival
  order.
- A duplicate fails when the receiver is not idempotent and is accepted when
  it is.
- A message beyond `maxTransitSeconds` is rejected for action.
- A message received before it was sent is NOT ASSESSED.
- `now` is never read: the same trace gives the same verdicts.