Harden first-release validation and dependency hygiene

README.md

@@ -4,6 +4,10 @@ Panda RPKI is an RPKI relying party written in Rust. It synchronizes repositorie
 over RRDP, validates signed objects, and exports routing data as CSV and Canonical
 Cache Representation (CCR). Run a single cycle or use the daemon for continuous operation.
 
+Version 0.1.0 is an unreleased candidate, validated on Linux x86-64. Other
+platforms are not yet verified. Review the [standards and limitations](docs/conformance-matrix.md)
+and [security policy](SECURITY.md) before evaluating it for routing use.
+
 ## Quick start
 
 Requirements: Linux, Docker, and a TAL with its matching DER trust-anchor
@@ -52,6 +56,7 @@ matching TA certificates. No RTR server is included. See the
 - [Docker and Compose](docs/docker.md): single-anchor, all-five and daemon deployments.
 - [Development and testing](docs/development.md).
 - [Contributing](CONTRIBUTING.md) and [changelog](CHANGELOG.md).
+- [Release checklist](docs/releasing.md).
 
 ## Build from source