[code6x-release]

🤖 I have created a release beep boop

0.5.0 (2026-11-11)

Features

• audit verify reports every open gap, accepts a known gap, and gives old anchors a log ID (#168) (0017857)
• run: --mask hides fetched values in the command's output (#169) (4444bef)

Documentation

• blank line before "Risk that remains" in T7, T28 and T35 (#165) (8b556e6)
• keep only key lines from ssh-keyscan in the known_hosts steps (#163) (d6157d7)
• put shell notes on their own line, not after the command (#164) (146b7f8)
• say the secret goes to the command, not to the agent (#167) (6df2171)
• unpack bws and bw on disk, not in /run/nodkey-setup (#161) (60202fa)

---

This PR was generated with Release Please. See documentation.

[code6x-release]

🤖 Created releases:

• v0.5.0

🌻