v0.24.2

Changelog

Fixes

• f0c8604 fix(acp): use correct error code and block bare denylisted commands
• 530b1de fix(agent): update DefaultModel to claude-sonnet-4-6
• d8d2f48 fix(autopilot): respect pipeline context cancellation in LLM calls
• 408fd19 fix(claudecode): kill subprocess process group on pipeline cancellation
• 649292e fix(doctor): update PinnedDippinVersion to v0.23.0 and fix env warning check
• 9feda63 fix(engine): fail on unknown outcome status instead of treating as success
• 294930c fix(examples): update manager_loop_child to use steer.* namespace
• 56f5ba2 fix(tui): add panic recovery to pipeline goroutine
• 1769457 fix: address PR #196 review comments
• fef76f3 fix: address PR #196 second-round review comments
• e65dd69 fix: remove stale human.go comment, escape newlines in osascript notifications

Other

• b92276b Merge pull request #196 from 2389-research/security/steer-context-namespace
• 579b887 Merge pull request #197 from 2389-research/fix/audit-critical-fixes
• 4ad223b release: v0.24.2
• eea96f0 security(acp): validate CreateTerminal commands against denylist and cwd
• a4feaa1 security(arch): namespace manager_loop steer_context keys under steer.*
• 165c201 security(claudecode): require TRACKER_PASS_API_KEYS=1 not just non-empty