What's Changed

• Use the lowercase gistrec/filecast repo name in links and install.sh by @gistrec in #21
• Document the Homebrew tap and link the encryption issue by @gistrec in #23
• Enforce no-clobber atomically and give main() sole ownership of the socket by @gistrec in #24
• Reject control/NUL bytes in sanitizeName by @gistrec in #26
• Use disk-backed transfer storage by @gistrec in #25
• Add disk-full E2E test for the write-failure cleanup branch by @gistrec in #27
• Don't delete cwd .part files when receive times out before ANNOUNCE by @gistrec in #28
• Bound part-metadata memory with a bitmap and a lazy sender map by @gistrec in #29
• Propagate durable flush/close errors from closePartFile by @gistrec in #30
• [Security review][M1] Reject same-session ANNOUNCE that would reset or hijack a transfer by @gistrec in #31
• [Security review][L4] Undeliverable datagrams silently strand transfers at large --mtu by @gistrec in #33
• [Security review][L7] Reject reserved device names with trailing spaces/dots by @gistrec in #35
• [Security review][L3] Reject pre-planted hardlinks when opening .part files by @gistrec in #32
• [Security review][L5] Exit non-zero when the sender can't reach the kernel by @gistrec in #36
• [Security review][L1] Bound the receive wait and resend phase on a wall-clock deadline by @gistrec in #37
• [Security review][L6] Use steady_clock for RESEND rate-limiting by @gistrec in #34
• Reject symlinks and hardlinks on Windows when opening .part files by @gistrec in #39
• Harden pre-latch ANNOUNCE handling and bound resend/ttl edge cases by @gistrec in #40
• Pre-release hardening, doc-sync, and repo hygiene by @gistrec in #41 Full Changelog: v1.0.0...v1.0.1