v0.1.0

What's Changed

• feat(tools): built-in Read/Write/Edit/Grep/Bash/WebFetch + SchemaLayer by @Arcanada in #1
• feat(core): hooks subsystem — ToolHook trait + HookChain + 3 default hooks (ARAS-0005) by @Arcanada in #2
• feat(core): close 4-layer permission cascade — Rule/Interactive layers + permissions.toml by @Arcanada in #3
• feat(tools): path-traversal protection for Read/Write/Edit (CWE-22) by @Arcanada in #4
• MAINT: resolve RUSTSEC-2026-0185 (quinn-proto) + 0190 (anyhow) via cargo update by @Arcanada in #7
• ARAS-0011: arcana_search Connector wrapper over Scrutator hybrid /v1/search by @Arcanada in #6
• ARAS-0021: BashTool RuleLayer enforcement in execute() by @Arcanada in #9
• ARAS-0022: WebFetchTool host allowlist enforcement by @Arcanada in #12
• docs(ARAS-0019,ARAS-0020,ARAS-0026): document 3 conventions/gotchas from approved evolution proposals by @Arcanada in #13
• ARAS-0013: Ops Bot events connector (fail-soft) by @Arcanada in #10
• ARAS-0024: CLI bootstrap default permission chain + whoami smoke by @Arcanada in #8
• feat(ARAS-0017): binary-name collision probe + cargo install docs by @Arcanada in #14
• ARAS-0014: Coworker subprocess delegation wrapper by @Arcanada in #11
• feat(core): add bounded agent loop driver by @Arcanada in #15
• feat(core): multi-model dispatch policy over the agent loop (ARAS-0031) by @Arcanada in #16
• feat: Phase-C vertical prototype capstone integration (ARAS-0032) by @Arcanada in #17
• feat(core): C4 CapabilityExecutor execution-invariant — fused audit + type-sealed veto + fail-closed (ARAS-0033) by @Arcanada in #18
• feat(gate): prod-gate smoke instrument + binary-side fixes (ARAS-0040) by @Arcanada in #19
• feat(cli): add authenticated grounded KB read loop by @Arcanada in #20
• fix(auth): align KB reader token issuer by @Arcanada in #21
• fix(kb): use routable model connector by @Arcanada in #22
• feat(tools): model_call as a cascade-gated capability (ARAS-0034) by @Arcanada in #23
• feat(mcp): expose capability core as an MCP server (ARAS-0037) by @Arcanada in #24
• feat(supervisor): process-group child supervisor with watchdog + budgets (ARAS-0035) by @Arcanada in #25
• feat(skills): declarative skills-engine — template/instance + maturity (ARAS-0036) by @Arcanada in #26
• ARAS-0047: skills storage in Scrutator/KB — real ScrutatorStore over frozen /v1/fetch by @Arcanada in #27
• ARAS-0049: agent↔KB interaction cascade (thin v1) — sanitize + cascade over /v1/fetch by @Arcanada in #28
• ARAS-0053: real tokenizer for KB size-guard (replace word-count proxy) by @Arcanada in #29
• ARAS-0050: Phase-3 semantic skill discovery over Scrutator (production-maturity filter) by @Arcanada in #30
• ARAS-0054: RAGAS-style eval harness + kb cascade instrumentation (offline v1) by @Arcanada in #31
• ARAS-0052: native server-side parent_of_chunk range in fetch connector by @Arcanada in #32
• ARAS-0051: production skills-store cutover (ScrutatorStore) + live-Scrutator e2e by @Arcanada in #33
• docs(release): CHANGELOG for v0.1.0 initial public release by @Arcanada in #34
• ci(release): fix cosign-installer for cosign v3.x asset format by @Arcanada in #37

Full Changelog: https://github.com/Arcanada-one/arcana-agent-system/commits/v0.1.0