chore(release): prepare v0.1.2

CHANGELOG.md

@@ -6,11 +6,15 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.1.2] - 2026-06-22
+
 ### Added
 
 - Lint and format tooling across all components: `ruff` (control plane),
   `golangci-lint` (agent), and ESLint + Prettier (web), plus `make lint` /
   `make fmt` targets and a `lint` CI job.
+- CI now runs the web `vitest` suite and production build.
+- `CONTRIBUTING.md` and `CHANGELOG.md`.
 
 ### Changed
 
@@ -19,9 +23,10 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ### Fixed
 
-- Corrected stale `agent/README.md` notes: the module engine and Ed25519 bundle
-  verification are implemented (the agent fails closed on bad signatures), so
-  they are no longer listed as TODO.
+- The agent now reports its real version (`0.1.2`); the constant had been left at
+  `0.1.0`.
+- Corrected stale docs: `agent/README.md` (module engine and Ed25519 fail-closed
+  verification are implemented, no longer TODO) and the README Tests section.
 
 ## [0.1.1] - 2026-06-22
 
@@ -69,6 +74,7 @@ Initial release.
 - **Demo**: one-command `make demo` full stack with a seeded org and a live
   agent loop against a fake-vulnerable target.
 
-[Unreleased]: https://github.com/kenlacroix/palisade/compare/v0.1.1...HEAD
+[Unreleased]: https://github.com/kenlacroix/palisade/compare/v0.1.2...HEAD
+[0.1.2]: https://github.com/kenlacroix/palisade/compare/v0.1.1...v0.1.2
 [0.1.1]: https://github.com/kenlacroix/palisade/compare/v0.1.0...v0.1.1
 [0.1.0]: https://github.com/kenlacroix/palisade/releases/tag/v0.1.0

agent/cmd/palisade/main.go

@@ -25,7 +25,7 @@ import (
 )
 
 // version is the reported agent version.
-const version = "0.1.0"
+const version = "0.1.2"
 
 func main() {
 	log.SetFlags(log.LstdFlags | log.Lmsgprefix)

site/public/install

@@ -14,7 +14,7 @@ REPO="kenlacroix/palisade"
 BIN="palisade"
 # Pinned to a known-good release by default; the published installer is updated
 # on each release. Override with PALISADE_VERSION=latest to track the newest.
-VERSION="${PALISADE_VERSION:-v0.1.1}"
+VERSION="${PALISADE_VERSION:-v0.1.2}"
 
 # Pinned minisign public key for release SHA256SUMS. When set, the installer
 # verifies the signature on SHA256SUMS before trusting any checksum. Leave empty

web/package.json

@@ -1,7 +1,7 @@
 {
   "name": "palisade-web",
   "private": true,
-  "version": "0.0.0",
+  "version": "0.1.2",
   "type": "module",
   "scripts": {
     "dev": "vite",