Release readiness polish

CHANGELOG.md

@@ -0,0 +1,53 @@
+# Changelog
+
+## 0.1.0 - Controlled Preview
+
+Date: 2026-05-14
+
+### Added
+
+- Native knowledge-operations foundation: governed asset registry, metadata
+  schemas, relationships, retrieval, transformations, workflow jobs, service
+  API, audit records, and policy-gated operation contexts.
+- Blob/content-stream foundation with in-memory, local filesystem, and optional
+  S3 adapters; representation content is deduplicated by digest and exposed
+  through native services and CMIS content-stream routes.
+- Profiled CMIS 1.1 Browser Binding subset for controlled integrations:
+  repository/type discovery, navigation projections, object reads/writes,
+  content streams, change tokens, ACL discovery, relationships, change log, and
+  selected compatibility operations.
+- Bounded CMIS read-side contract for simple document queries, common-property
+  ordering, relationship filters, ACL vocabulary, and explicit unsupported
+  diagnostics.
+- Compact pytest performance-history monitor with rolling and daily summaries.
+- State Hub registered workplans and timestamped CMIS assessment evidence.
+
+### Evidence
+
+- Full venv test suite:
+  `.venv/bin/python -m pytest -q` -> `166 passed`, `15 skipped`.
+- OpenCMIS selected Browser Binding baseline:
+  `run-20260514T003705Z` -> completed, `0` unexpected findings, `0` waivers,
+  object/content passed, only local HTTP loopback warning remains.
+- Packaging smoke:
+  `python3 -m build --sdist --wheel` succeeded for `0.1.0`.
+- Clean install smoke:
+  installed `kontextual_engine-0.1.0-py3-none-any.whl[service]` in a throwaway
+  venv and verified `kontextual_engine.__version__`, `create_app`, and runtime
+  attachment.
+
+### Known Limitations
+
+- This is not a full CMIS certification and not a broad ECM replacement claim.
+- CMIS support is Browser Binding only; AtomPub and Web Services are out of
+  scope.
+- CMIS `getDescendants`, `getFolderTree`, PWC/checkin/checkout, full CMIS SQL,
+  policy mutation, retention/hold, renditions, and broad filing mutations are
+  intentionally unsupported.
+- Multifiling is projection-only.
+- `appendContentStream` is whole-object append through deduplicating storage;
+  chunk-level composition remains deferred.
+- Preview deployments must put CMIS access points behind HTTPS termination.
+- Optional `markdown` and `llm` extras point to local sibling repositories for
+  this controlled workspace preview; they are not required for the default or
+  service install.