v0.78.0

Changelog

Fixes

• f936cca fix(#661): make Windows liveness stub conservatively assume alive
• d61452c fix(#661): make agent and tracker-swebench cross-compile for Windows
• daf117e fix(#663): remove dead tool_pass_env knob from ToolNodeConfig
• ad887e1 fix(#673): update stale docs + pin TRACKER_PASS_ENV in the #671 tests
• 9545b3c fix(security): filter credentials from the turn-checkpoint and swebench git probes (#671)
• 8f6a8a9 fix(security): refuse group/world-writable config .env too (#666)
• e679137 fix(security): source-aware .env loading with an env trust registry (#659)
• 20fb5cc fix: fold shell logical lines in the pipefail gate (#664)
• 01b8c6b fix: jail allows /dev/null; race test witnesses both sides (#658 part 2)
• c84209f fix: pipe-free fixture assertions and a shell gate for SIGPIPE under pipefail (#658)
• f93a150 fix: tighten stale tool.go complexity baseline (#662)

Other

• f15f26f ci(#665): reject non-positive jail_stress_count and bound stress timeout
• 9b1ddb2 docs(changelog): consolidate [Unreleased] groups after the #658-#663 merges
• ffcd709 docs(claude.md): document the PR + bot-review workflow (replaces the stale no-PR rule)
• 17d18fa docs: describe backend environment policies as the code implements them (#660)
• cd87fee docs: scope the env filter and config .env claims to the code paths that implement them (#660)
• 4427f2c docs: scope the gitSafeEnv guarantee and describe ACP cache-read pricing as model-specific (#667)
• f8e0ad9 docs: stop over-narrowing the gitSafeEnv-filtered git subprocess set (#667)
• 5945bed merge: correct backend credential/env documentation (#667, #660)
• 75f4160 merge: cross-compile agent + tracker-swebench for Windows (#668, #661)
• 78b610f merge: filter credentials from the turn-checkpoint and swebench git probes (#673, #671)
• e88f18c merge: pipe-free fixture assertions + shell gate for SIGPIPE under pipefail (#664, #658)
• c0c8a73 merge: remove dead tool_pass_env knob (#670, #663)
• 51be1a9 merge: source-aware .env trust policy (#666, #659)
• 0f37802 merge: tighten stale complexity baseline for tool.go (#669, #662)
• a5c32c4 merge: witnessed jail race test + /dev/null RWFiles + CI pipefail/stress hardening (#665, #658)
• 59da98c release: v0.78.0
• 259004a release: v0.78.0 — env-trust policy, credential-boundary hardening, jail + flake fixes