v0.88.0

## Highlights

### RuVix Cognition Kernel (ADR-087)

A foundational architecture for **RuVix** — a cognition kernel for the Agentic Age. Not a Linux clone, but a purpose-built OS with 6 primitives, 12 syscalls, and RVF as native boot object.

**Core primitives**: task, capability, region, queue, timer, proof

**Key innovations**:
- **Proof-gated mutation as kernel invariant** — no proof, no mutation
- **RuVector kernel-resident** — vectors and graphs are native kernel resources
- **Coherence-aware scheduler** — deadline + novelty + structural risk
- **RVF as boot object** — signed packages are complete cognitive units
- **12 syscalls total**

**Build path**: Phase A (Linux-hosted nucleus, 9 crates) → Phase B (bare metal AArch64)

**8 demo applications**: proof-gated vector journal, edge ML inference, drone swarm, self-healing knowledge graph, collective intelligence mesh, quantum-coherent memory replay, biological signal processor, adversarial reasoning arena

### Security Hardening (Post-Audit)

6 specification clarifications added after security audit:
1. Root task privilege attenuation — drops capabilities after boot
2. Capability delegation depth limit — max depth 8, GRANT_ONCE right
3. Boot RVF proof bootstrap — signed boot is the single trusted path
4. Reflex proof cache scoping — per-(mutation_hash, nonce), single-use
5. Zero-copy IPC TOCTOU — rejects descriptors into Slab regions
6. Boot signature failure — kernel panic, no fallback

### Neural Trader WASM Bindings (ADR-086)

4 new crates: core (2 tests), coherence (7 tests), replay (3 tests), wasm (10 + 43 JS tests)

### Visual Updates

Animated dot-matrix grid and billboard squares on pi.ruv.io

## PRs: #244, #248 + security hardening commit

🤖 Generated with [claude-flow](https://github.com/ruvnet/claude-flow)