v0.48.0

Changelog

Features

• 60114e8 feat(agent): fail-closed pre-execution tool-call guardrail hook (#506)
• 52e9594 feat(human): add optional GateAware side-interface for gate identity on the callback

Fixes

• 28b6ce6 fix(activity): write per-turn agent usage to activity.jsonl (audit finding 1)
• 670857c fix(agent): recover panicking guardrail policy; scope built-in denylist to command tools (#506)
• 49d73a4 fix(diag): route root-package parse/preflight diagnostics + repeatable tests (#449)
• bc60cb4 fix(events): stamp run_id on all handler-originated pipeline events
• 4acd18e fix(pipeline): make buffered-handler eviction order-preserving
• c7dcf60 fix(pipeline): protect gate events from buffered-handler eviction

Other

• 34e616e Merge remote-tracking branch 'origin/main' into pr_gate
• 5f74c68 docs: release v0.48.0 — policy, hygiene & coherence
• 56db0c2 merge: GateAware side-interface — gate identity on the interviewer callback
• ca27e36 merge: buffered handler never splits a gate pair (audit finding 2)
• f0b5796 merge: fail-closed pre-execution tool-call guardrail hook (#506)
• bbe55df merge: per-turn agent usage now persists to activity.jsonl (audit finding 1)
• 8ebfade merge: route library diagnostics onto an injectable sink (#449)
• c49b49e merge: stamp run_id on all handler-originated pipeline events (audit finding 3)
• 3331e91 refactor(diag): route library diagnostics onto an injectable slog sink (#449)