MZI Linux Host 0.7 preview 1 for Linux x64

Recommended distribution:
- Download mzi-host-linux-x64.AppImage from mzi.app/downloads.
- Run: chmod +x mzi-host-linux-x64.AppImage
- Start: ./mzi-host-linux-x64.AppImage
- GTK4, the font stack, Wasmtime runner and proof package are included.
- If FUSE 2 is unavailable, run with APPIMAGE_EXTRACT_AND_RUN=1.

This archive contains:
- mzi-host-linux-gtk: native graphical GTK4 host
- mzi-host-linux: portable semantic terminal fallback
- mzi-component-runner: static Wasmtime Component Model runtime
- field-notes.mzi: the exact signed package used by Browser and Windows hosts
- capability-clock.mzi and capability-http.mzi: capability-bound Component proofs
- benchmark.json: timings measured inside the Linux build container

Run:
1. Extract the complete .tar.gz archive.
2. Start a terminal in the extracted directory.
3. Install the GTK4 runtime if your distribution does not include it.
   Debian/Ubuntu: sudo apt install libgtk-4-1
4. Run: ./mzi-host-linux-gtk
5. Review the package identity, publisher and requested authority.

To switch applications without restarting the host, drag another `.mzi` file
onto the GTK window and approve its capability review.

During development, `mzi dev . --launch` negotiates one local session with the
GTK host. Valid code and interface revisions replace the runtime in place;
publisher, storage, WASI and capability changes require a new review.

The graphical host renders the semantic form, statistics, record list and
application actions as native GTK controls. If GTK4 is unavailable, use the
dependency-free terminal fallback: ./mzi-host-linux

Open another package:

  ./mzi-host-linux /path/to/application.mzi

Useful commands inside the proof application:

  set draft Replace pump filter
  run add-note
  run toggle-note 1
  run remove-note 1
  run clear-completed
  quit

Current security boundary:
- ZIP structure, declared paths and semantic profiles are validated.
- Ed25519 verifies the canonical package payload before execution.
- Stable state is bound to the verified publisher key.
- Clock imports and HTTP host tasks require matching manifest authority.
- HTTP tasks use a signed distribution origin, reject redirects and cap responses at 256 KiB.
- Component actions use typed WIT bindings with fuel and a host deadline.
- State migrations execute inside Wasmtime after a versioned backup.

The included signature uses a public development fixture key. GTK4 is a host
dependency in this tar archive, but it is bundled by the AppImage. Neither host
binary nor the AppImage is code-signed yet.
