20260914 强制 TOML 配置并完善 TA 刷新与 daemon

CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## 0.1.0 — Unreleased
 
+- Breaking CLI change: mandatory TOML via `validate|daemon --config FILE`;
+  remove business flags, `--` forwarding and logging environment overrides.
+- Read-only configuration checking/printing and top-level version output.
+- TAL-driven TA certificate refresh with validated cache fallback; TAL files
+  remain operator-maintained.
+- Explicit success/partial/failed results, strict completion exit code 3,
+  atomic completion markers and success-only latest publication.
+- Complete automatic-TA/text-log Compose TOML examples and stop/edit/reload guide.
+
+
 - RPKI validation with multiple TAL/TA inputs and resource constraints.
 - RRDP snapshot/delta synchronization and same-origin enforcement.
 - Bounded transport and object worker pools.
@@ -9,5 +19,5 @@
 - Foreground daemon with intervals, timeouts, restart and retention.
 - Docker and Compose deployment, including all-five-anchor configuration.
 
-The CLI accepts HTTPS RRDP. Operators supply TALs and matching certificates.
+The CLI accepts HTTPS RRDP. Operators supply TALs; matching TA certificates can be fixed or automatically refreshed.
 No RTR server is included. See the standards matrix and CLI reference for scope.