feat(vault): v1.0.0 — production-stable API lock

The governed knowledge store for autonomous organizations.

API is now locked. Breaking changes require a major version bump.
543 tests, mypy strict 0 errors, ruff 0 errors, 100/100 security.

New in 1.0:
- upsert() and get_multiple() methods
- Migration, deployment, and troubleshooting guides
- Production/Stable classifier on PyPI

Breaking changes (from v0.x):
- trust parameter renamed to trust_tier
- trust_min parameter renamed to min_trust_tier
- LayerDefaults.trust field renamed to LayerDefaults.trust_tier

Author: bradleygauthier

CHANGELOG.md

@@ -7,6 +7,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.0.0] - 2026-04-07
+
+### Added
+- `vault.upsert(source, name=...)`: add-or-replace atomically. Supersedes existing resource with same name + tenant
+- `vault.get_multiple(resource_ids)`: batch retrieval in a single query (added to Protocol, both backends)
+- Migration guide: `docs/migration.md`
+- Deployment guide: `docs/deployment.md` (PostgreSQL, SSL, encryption, scaling)
+- Troubleshooting guide: `docs/troubleshooting.md` (error codes, common issues)
+
+### Changed
+- **BREAKING**: `trust` parameter renamed to `trust_tier` on `add()`, `list()`, `update()`, `add_batch()`, `replace()`
+- **BREAKING**: `trust_min` parameter renamed to `min_trust_tier` on `search()`, `search_with_facets()`
+- **BREAKING**: `LayerDefaults.trust` field renamed to `LayerDefaults.trust_tier`
+- Classifier upgraded from "Alpha" to "Production/Stable"
+
 ## [0.16.0] - 2026-04-06
 
 ### Added
@@ -238,7 +253,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Max file size enforcement (configurable)
 - Content null byte stripping on ingest
 
-[unreleased]: https://github.com/quantumpipes/vault/compare/v0.16.0...HEAD
+[unreleased]: https://github.com/quantumpipes/vault/compare/v1.0.0...HEAD
+[1.0.0]: https://github.com/quantumpipes/vault/compare/v0.16.0...v1.0.0
 [0.16.0]: https://github.com/quantumpipes/vault/compare/v0.15.0...v0.16.0
 [0.15.0]: https://github.com/quantumpipes/vault/compare/v0.14.0...v0.15.0
 [0.14.0]: https://github.com/quantumpipes/vault/compare/v0.13.0...v0.14.0

docs/api-reference.md

@@ -1,6 +1,6 @@
 # API Reference
 
-Complete Python SDK for qp-vault v0.15.0.
+Complete Python SDK for qp-vault v1.0.0.
 
 ## Constructor
 

docs/architecture.md

@@ -281,7 +281,7 @@ config = VaultConfig(
 
 <!-- VERIFIED: config.py:18-86 — VaultConfig fields and defaults -->
 
-## Security Architecture (v0.15.0)
+## Security Architecture (v1.0.0)
 
 ```
 +-------------------------------------------------------------------+

docs/security.md

@@ -1,6 +1,6 @@
 # Security Model
 
-qp-vault's security architecture for v0.15.0.
+qp-vault's security architecture for v1.0.0.
 
 ## Cryptographic Inventory
 

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "qp-vault"
-version = "0.16.0"
+version = "1.0.0"
 description = "Governed knowledge store for autonomous organizations. Trust tiers, cryptographic audit trails, content-addressed storage, air-gap native."
 readme = "README.md"
 license = "Apache-2.0"

src/qp_vault/__init__.py

@@ -26,7 +26,7 @@
 Docs: https://github.com/quantumpipes/vault
 """
 
-__version__ = "0.16.0"
+__version__ = "1.0.0"
 __author__ = "Quantum Pipes Technologies, LLC"
 __license__ = "Apache-2.0"
 

src/qp_vault/vault.py

@@ -1079,7 +1079,7 @@ async def export_vault(self, path: str | Path) -> dict[str, Any]:
         self._check_permission("export_vault")
         resources: list[Resource] = await self._list_all_bounded()
         data = {
-            "version": "0.16.0",
+            "version": "1.0.0",
             "resource_count": len(resources),
             "resources": [r.model_dump(mode="json") for r in resources],
         }