Release Privacy Tools 0.2.0

public/README.md

@@ -22,9 +22,24 @@ lookups, telemetry, or runtime network calls. A source file is never modified.
    removed, preserved, generated, unsupported, or incompletely checked, and
    includes source/output SHA-256 hashes and a bounded decoded-pixel sample
    comparison.
-5. Download an individual re-encoded image, a JSON report, or a ZIP containing
-   re-encoded images and the report. The report itself may be sensitive because
-   it contains source filenames and metadata values.
+5. Download generic sequentially named outputs, a pseudonymized safe-share
+   report, or a ZIP containing both. The separate detailed report preserves
+   source filenames and metadata values and may itself be sensitive.
+6. Apply a reusable selective-removal policy to the scan evidence. The policy
+   matrix records remove, preserve, and review categories for every input,
+   distinguishes verified full re-encoding from inspect-only formats, and can
+   be exported without source names or raw metadata values.
+
+The safe-share report deliberately omits source names, timestamps, hashes,
+exact byte sizes, metadata values and offsets. It retains scanner coverage,
+format/dimension facts and categorized counts; unusual combinations can still
+be identifying, so the report remains subject to human review.
+
+Policy evidence is a decision aid, not a surgical metadata editor. Current
+JPEG/PNG/WebP output is a complete decoded-pixel re-encode; it does not preserve
+selected source metadata. For TIFF, GIF, HEIF-family, JPEG XL, PDF, archives,
+Office and unknown inputs the policy honestly reports `inspect-only` or
+`policy-not-executable` rather than promising a cleaned file.
 
 ## Format support
 
@@ -107,7 +122,7 @@ npm run release:artifact
 
 This checks the manifest, types, lint, formatting, unit fixtures, production
 build, Toolbox contract, and Chromium/Firefox workflows, then creates the
-deterministic `release/privacy-tools-0.1.0.zip` plus its SHA-256 sidecar. The
+deterministic `release/privacy-tools-0.2.0.zip` plus its SHA-256 sidecar. The
 archive contains the static application, project documents, and exact runtime
 dependency licence texts.