v0.1.1

Update README.md

Tesseract

Tesseract 0.1.0 — Installation Notes

Requirements: libgtk-4-1 ≥ 4.10, libadwaita-1-0 ≥ 1.4, udisks2, fuse3

Install:
sudo dpkg -i tesseract_0.1.0_amd64.deb
systemctl --user enable --now tesseract-agent
tesseract-gui

Hardened systems (Ubuntu 23.10+, Debian Bookworm+)

Systems with kernel.apparmor_restrict_unprivileged_userns=1 or kernel.unprivileged_userns_clone=0 — common on
Ubuntu 23.10+, Debian Bookworm+, and any kernel with AppArmor namespace restrictions — require the deb package,
which ships a compatible systemd unit. The unit omits mount-namespace-based sandboxing directives that fail on
these kernels; equivalent isolation is provided by the agent's own startup hardening (seccomp allowlist,
no_new_privs, core dump disabled, memory-locked key arenas).

Do not use packaging/install.sh on these systems — the source unit targets standard configurations and will fail
with exit 218/CAPABILITIES.

No root required. All operations run as your user. The optional dm-crypt fast path (tesseract-mountd) is the only
component that requires elevated privileges and is not installed by default.