feat: OACP v0.3.1

[kiloloop-release]

Summary

Promote v0.3.1 from kiloloop/oacp-release @ 45e7026 to public.

What's in this release

Added

• auto_review autonomy mode — opt-in receiver-side autonomy profile classifying inbound messages into auto-accept / pause / hard-stop bands via clean / ambiguous / hard-stop trigger predicates. Configured through receiver_config.autonomy_mode: auto_review with auto_review_profile (standard or tight). Off by default; ships with conformance fixtures under tests/conformance/autonomy/.

Changed

• README refreshed with a hero image and three screenshots (inbox flow, doctor output, multi-agent workspace layout). Command table and install path aligned with current CLI surface.
• README and onboarding docs link to the companion oacp-skills repo.

Audit

• make preflight --full PASS on oacp-release main (475 tests, 5 sandbox-isolated tests excluded for 1Password signing)
• python -m build PASS — produced oacp_cli-0.3.1-py3-none-any.whl + oacp_cli-0.3.1.tar.gz
• Leak scan on extracted content: no /Users/, no haoranc / spbkgw-beep, no kiloloop/oacp-dev / kiloloop/oacp-release URLs, no credential shapes, no private-key markers
• Stale file check (target ∖ source) empty
• CHANGELOG entries are words-only (no PR refs on new entries per public-repo rule)

Next

After human merge → tag v0.3.1 from main → release.yml Trusted-Publish triggers PyPI publish → GitHub Release.