[EricAndrechek]

Lockstep 1.0.3 of Go, Python, TypeScript and Rust, prepared on main (the 1.0 tree since #475).

Carries:

• the setup latch unlocks after any failed load attempt, in all four bindings (Known 1.0.2 limitation: setup stays latched when the first open fails before load step 7 (e.g. an incompatible artifact) #468, setup: a failed open before the first step 7 unlocks setup (#468) #469)
• Go retract [v0.1.0, v0.5.2] (go: retract the 0.x line, v0.1.0 to v0.5.2 (#431) #471, Held for the maintainer: delete the five retained v0 Go verification files and prune their protected-path entries #431)

Changes: version bumps (pyproject, package.json, Cargo.toml, Go bindingVersion), version-only lockfile updates (python/uv.lock, rust/Cargo.lock, examples/python/uv.lock, examples/rust/Cargo.lock), each CHANGELOG's Unreleased turned into 1.0.3, and RELEASING.md now says releases are tagged from main. No tags are pushed by this PR.

Refs #468

🤖 Generated with Claude Code