Roadmap: 0.9

[blessdyb]

Adds the 0.9 line to the README roadmap and the website, from the 0.8.1 security review plus what fixing it exposed. No code, no version bump — documentation only, so it doesn't need a release.

• 0.9.0 — Coverage, stated rather than assumed. Per app: watched by the extension, decrypted by the proxy, named only by DNS or SNI, or not covered at all — and why. Today you have to read several honest paragraphs elsewhere to know which of those applies to anything.
• 0.9.1 — A threat model, written down. What it defends against and what it doesn't, with "monitoring, not prevention" said beside every mention of blocking. Plus a security contact for people who can't use GitHub's private reporting, and self-hosted fonts — a local-first tool shouldn't make a third-party request to render its own privacy page.
• 0.9.2 — A budget for inspection. Recorded bodies are the most sensitive thing Flowlight holds, and the redaction protecting them is a guess at which headers carry credentials. Allowlist, own patterns, keep-no-headers, per-app ceilings, an expiring session.
• 0.9.3 — Show me what this rule would have done. Replay the last day against a rule before it refuses anything.
• 0.9.4 — What leaves the Mac, before it leaves. The export disclosing itself the way Flowlight makes everything else disclose.

🤖 Generated with Claude Code