[dnlrsls]

Prepare offline auditor v0.1.1

Closes #6

PR type

• Bug fix
• New feature
• Documentation only
• Code refactoring
• Maintenance/tooling
• Breaking change

Summary

• Set the existing tested native binary, archive names and metadata to 0.1.1.
• Document the already merged repository-boundary/bootstrap and lossless human-summary fixes (fix(discovery): isolate nested repositories and protect bootstrap destinations #113, feat(report): summarize uncertainty without dropping scoped evidence #114).
• Keep offline scope, machine contracts, runtime controls and deferred [P1] Verify lint sensitivity with clean and controlled-fault fixtures #9 unchanged. This PR does not itself publish a tag or release.

Changes

File	Change
cmd/ci-trust/release_test.go	Build, assert and record native version 0.1.1.
cmd/ci-trust/release_export_test.go	Assert and export version-matching native ZIPs.
docs/releases/0.1.1.md	Patch scope, installation, actual-native distribution and honest limits.
README.md	Version-neutral downloads and new notes; preserve original scope/history.
THIRD_PARTY_NOTICES.md	Version-neutral heading only; upstream terms/dependencies unchanged.

Test plan

• Public version rule: observed old-version RED, then GREEN with exact ci-trust "0.1.1" / exit 0 / empty stderr.
• Native export rule: observed missing-new-archive RED, then GREEN; version/ZIP/metadata/binary/license checks.
• Independent focused public regressions passed; CLI dev parity and input/counter immutability retained.
• Final go test -count=1 ./... and go vet ./... passed offline after a separately authorized private Windows temp-environment correction. The initial local suite failure remains recorded, not rewritten as success; no product workaround was added.
• Independent receipt-only update resolved that missing-source-proof blocker without rerunning tests.
• Native Linux/Windows/macOS PR CI (required before normal merge).
• Final-main native archives, provenance and publication checks (separate release steps; no local reconstruction distributed).

Contributor checklist

• Linked existing approved issue [P0] Deliver read-only audit and report CLI with human and JSON output #6; preserve its closed state and labels.
• Exactly one type:* label: type:chore at creation.
• Shellcheck: N/A, no committed shell scripts changed.
• Skills testing: N/A, no skills changed.
• Documentation accompanies the release metadata.
• Conventional Commit; no Co-Authored-By trailers.

Risk: item 5 (native release metadata/delivery). Writer and independent source checks are complete; native assessment was unassessable with RDD off, not approval. Preserve normal merge history and branches; no new workflow, dependencies, runtime admission or execution-efficacy claim.