release: NX9-WG v1.0.0

docs/release.md

@@ -13,24 +13,29 @@ bash scripts/package-release.sh
 ```
 
 ### Packaging Outputs in `target/dist/`:
-- `nx9-wg-v0.8.0-linux-x86_64.tar.gz` (Standard gzip archive)
-- `nx9-wg-v0.8.0-linux-x86_64.tar.xz` (High-compression XZ archive)
-- `nx9-wg-v0.8.0-linux-x86_64.sha256` (Cryptographic SHA-256 checksums)
+- `nx9-wg-v1.0.0-linux-x86_64.tar.gz` (Standard gzip archive)
+- `nx9-wg-v1.0.0-linux-x86_64.tar.xz` (High-compression XZ archive)
+- `nx9-wg-v1.0.0-linux-x86_64.sha256` (Cryptographic SHA-256 checksums)
 
 ---
 
-## 2. Release Archive Contents
+## 2. Release Documentation
+
+The release documentation is versioned with the source tree. `CHANGELOG.md` records release-level changes, while `docs/TESTING.md` is the authoritative v1.0.0 testing and acceptance specification.
+
+## 3. Release Archive Contents
 
 Every release archive contains everything required for a standalone, offline production deployment:
 
 ```
-nx9-wg-v0.8.0-linux-x86_64/
+nx9-wg-v1.0.0-linux-x86_64/
  ├── nx9-wg              (Native executable binary, mode 0755)
  ├── nx9-wg.service      (Hardened systemd unit file, mode 0644)
  ├── config.example.toml (Production configuration template, mode 0644)
  ├── install.sh          (Automated production installer, mode 0755)
  ├── uninstall.sh        (Safe uninstallation script, mode 0755)
  ├── README.md           (Primary project guide)
+ ├── CHANGELOG.md        (Release history)
  ├── LICENSE-MIT         (MIT License text)
  ├── LICENSE-APACHE      (Apache 2.0 License text)
  └── docs/               (Complete offline documentation suite)
@@ -38,7 +43,7 @@ nx9-wg-v0.8.0-linux-x86_64/
 
 ---
 
-## 3. Standalone Verification Invariant
+## 4. Standalone Verification Invariant
 
 Release packages must function completely independently of the source repository. When extracted into an isolated clean directory (`/tmp/nx9-release-verify...`):
 - `nx9-wg version` outputs valid version, architecture, and platform strings.
@@ -48,7 +53,7 @@ Release packages must function completely independently of the source repository
 
 ---
 
-## 4. Production Filesystem Layout
+## 5. Production Filesystem Layout
 
 ```
 /usr/local/bin/nx9-wg        (0755 root:root - Binary)
@@ -67,7 +72,7 @@ Release packages must function completely independently of the source repository
 
 ---
 
-## 5. Systemd Security Sandboxing
+## 6. Systemd Security Sandboxing
 
 The production service unit (`nx9-wg.service`) enforces modern Linux security directives:
 
@@ -79,7 +84,7 @@ The production service unit (`nx9-wg.service`) enforces modern Linux security di
 
 ---
 
-## 6. Upgrade and Rollback Sequence
+## 7. Upgrade and Rollback Sequence
 
 ### Mandatory Upgrade Flow
 1. **Pre-Upgrade Backup**: `nx9-wg backup create --description "Pre-upgrade checkpoint"`