v0.5.3

What's Changed

• docs(setup-host): explain why curl-pipe-sh rustup install is safe here — closes #236 by @WaylandYang in #237
• fix(ci): pypi-publish skip-existing=true so re-pushed tags don't go red by @WaylandYang in #238
• feat(cli): forkd quickstart — zero-to-first-fork in one command by @WaylandYang in #240
• fix(setup): add paranoid checksum mode by @Photon101 in #241
• fix(quickstart): make the one-command path actually reach first fork by @WaylandYang in #243
• docs(readme): add guest/host kernel support matrix — closes #244 by @WaylandYang in #245
• docs(readme): doctor runs 17 checks, not 16 by @WaylandYang in #246
• fix(#242): ship rootfs as content-addressed sidecar so hub packs are portable by @WaylandYang in #247
• chore(hub): re-bake python-numpy as a portable pack (rootfs sidecar) by @WaylandYang in #248
• chore(hub): 4 more portable packs (nodejs, langgraph-react, coding-agent, postgres-fixture) by @WaylandYang in #249
• fix(build-rootfs): skip docker pull when the image is already local by @WaylandYang in #250
• chore(hub): jupyter-kernel + e2b-codeinterpreter portable (8/9 done) by @WaylandYang in #251
• docs(readme): hero cast — clean-host hub-pull → fork 100 microVMs by @WaylandYang in #252
• docs(hub): document the rootfs sidecar so publishers don't reproduce #242 by @WaylandYang in #253
• chore(hub): playwright-browser portable — 8/9 done by @WaylandYang in #255
• fix(py-sdk): robust target parsing + empty-response handling in Sandbox._send (closes #256) by @WaylandYang in #258
• fix: bounded WP-uffd accept (#261) + harden tag/id path joins (#259, #260) by @WaylandYang in #262
• Add daemon sandbox spawn and harden rootfs cleanup by @TheusHen in #265
• fix(security): harden daemon auth boundaries by @TheusHen in #266
• Add KSM doctor check and memfd probe evidence by @TheusHen in #267

New Contributors

• @Photon101 made their first contribution in #241
• @TheusHen made their first contribution in #265

Full Changelog: v0.5.2...v0.5.3