Document Web Foundations Preview 5

.gitea/workflows/verify.yml

@@ -2,7 +2,7 @@
 name: verify
 on:
   push:
-    branches: [main, 'codex/**']
+    branches: [main, 'codex/**', 'gamertan/**']
   workflow_dispatch:
 permissions:
   contents: read

CHANGELOG.md

@@ -4,6 +4,8 @@
 
 ## Unreleased
 
+## v0.1.0-preview.5 — 2026-08-21
+
 - Add storage-neutral passkey registration, discoverable login, and
   operation-bound fresh assertions without adding self-registration, password
   fallback, TOTP, email recovery, or application-owned routes.
@@ -17,6 +19,10 @@
 - Pin WebAuthn protocol verification to `github.com/go-webauthn/webauthn`
   `v0.17.1` and record its source identity, module checksums, licence, and
   transitive security boundary.
+- Add self-service passkey enrollment and removal primitives with fresh
+  assertion, session revocation, and last-credential protection.
+- Keep Previews 1–4 immutable; applications select Preview 5 explicitly when
+  adopting the passkey boundary.
 
 ## v0.1.0-preview.4 — 2026-08-18
 

README.md

@@ -2,7 +2,7 @@
 
 # Gamertan Web Foundations
 
-> Status: `v0.1.0-preview.4` public preview. APIs may change before a stable
+> Status: `v0.1.0-preview.5` public preview. APIs may change before a stable
 > release; Linux is the maintained release platform.
 
 Small, composable Go packages for the unglamorous boundaries of a careful web
@@ -24,14 +24,14 @@ Pin the preview in an application module, then import only the packages that
 application needs:
 
 ```bash
-go get gamertan.com/web@v0.1.0-preview.4
+go get gamertan.com/web@v0.1.0-preview.5
 go mod verify
 ```
 
 An application may also name the first package it intends to adopt:
 
 ```bash
-go get gamertan.com/web/requestmeta@v0.1.0-preview.4
+go get gamertan.com/web/requestmeta@v0.1.0-preview.5
 ```
 
 The version belongs to the `gamertan.com/web` module. Go compiles and links

docs/GETTING_STARTED.md

@@ -25,7 +25,7 @@ The packages are ordinary Go imports. Pin the current preview and verify its
 module checksum:
 
 ```bash
-go get gamertan.com/web/requestmeta@v0.1.0-preview.4
+go get gamertan.com/web/requestmeta@v0.1.0-preview.5
 go mod verify
 ```
 

docs/MODULES.md

@@ -18,7 +18,7 @@ import "gamertan.com/web/requestmeta"
 and request the containing module at an exact version:
 
 ```bash
-go get gamertan.com/web/requestmeta@v0.1.0-preview.4
+go get gamertan.com/web/requestmeta@v0.1.0-preview.5
 ```
 
 Only imported packages are compiled and linked. The packages nevertheless