- ABI stabilization and documentation
- C++ bindings (header-only,
bindings/cpp/) - Python bindings
- Correctness tests: installation unit tests, fuzzing (package JSON, dep constraints)
- pkg-config and CMake find module
- Drop the gpgme (OpenPGP) signing backend entirely; libsodium (Ed25519) becomes the only one
- Atomic installation: all-or-nothing semantics