v0.1.0 — Initial secure datacenter image trust release

Highlights

• Secure datacenter ISO acquisition workflow
• GPG signature verification for downloaded images
• SHA256 checksum validation
• Trusted signing key and fingerprint validation
• Distribution allowlist enforcement
• Offline verification mode
• JSON output for automation and CI/CD integration
• Ubuntu, Debian and Fedora support

Architecture

• datacenter_image_trust → core verification engine
• trust_store → trusted distribution metadata, keys and fingerprints
• bin/datacenter-image-trust → CLI entrypoint
• tests → validation and regression coverage

Note

This version represents the first stable security-focused baseline for trusted datacenter image retrieval and verification workflows.