v0.2.0

Changelog

• db92740 Release v0.2.0: narrowed guard hook, e2e harness, Codex hook
• 274e823 add e2e harness: allow-listed bot writes, reads, waits; codex guard hook
• 172ab43 e2e review r1: waits start before the write; keyboard paging; guard and hook holes closed
• d18db5e e2e: stop live drafts, webapp-url platform, bot api entity names; pin hook to binary read list
• c6ed837 e2e: tests with an in-memory bot chat; docs for the harness and the codex guard
• 6c57a5b hook: ask only about what a call visibly does
• d8671c9 hook: ask when an e2e write names a chat outside e2e.allowed_chats
• b462f7b hook: decide on every codex shell shape and fail closed
• 0904813 hook: decide on every string a payload carries, the same on both hooks
• a5ff4cd hook: opaque execution asks when the call names a TGAC_ variable or a settings file
• 8135979 hook: read unknown-tool fields by role; metadata and plain text are data
• 09b2d1a hook: ssh remote paths are not read locally; 8 s deadline