v0.3.0 — AGT Control Plane (Cut 2)

v0.3.0 — AGT Control Plane (Cut 2)

Hero: Cut 2 wires Clawforge to the Microsoft Agent Governance Toolkit (AGT)
canonical model end-to-end. Operators now see — and act on — every
enrolled agent, every shadow runtime, every trust signal, every policy
event, and every audit fact in a single live console.

Added

• Agent Hypervisor — runtime overview joining identities + audit +
  metrics with live/idle/offline bands; admin Pause / Resume / Terminate
  where Terminate revokes the identity AND opens an agent-scoped kill
  switch atomically.
• Identity management — DID-anchored register/list/inspect with
  suspension and revocation; per-DID delegation graph (outgoing +
  incoming).
• Discovery (shadow agents) — fingerprint detection of unenrolled
  runtimes with unknown/investigating/known/quarantined triage.
• Trust heatmap — AGT tier derivation (Untrusted / Provisional /
  Trusted / Verified) with continuous-HSL dimension visualisation.
• Compliance attestation — JWT-signed proof of audit-chain integrity
  for an org + time range; verifier round-trips signature + orgId.
  Per-agent boundary hashes let auditors stitch adjacent attestations.
• Metrics ingest + admin — agent-submitted runtime snapshots with
  overall / 24h / 1h aggregations and a top-agent leaderboard.
• Kill-switch panel rewrite on canonical AGT routes with live multi-tab
  SSE updates.
• Server-Sent Events bus — org-scoped fan-out of kill_switch /
  policy_changed / identity_changed events.
• Client SSE consumer — Clawforge.connect() auto-detects SSE (polling
  fallback); new cf.onPolicyChanged() API; client auto-reloads the AGT
  engine on policy_changed.
• End-to-end smoke (examples/cut2b-smoke.mjs) — exercises every Cut 2
  endpoint against a live stack.

Changed

• Audit chains are scoped per-agent; verify walks each independently
  and reports break kind (linkage vs content).
• Admin nav reorganised (Hypervisor / Identities / Discovery / Trust
  / Compliance / Metrics added).
• Policies / Approvals / Audit pages migrated to the shared Sidebar
  • Card shell used by every other page.
• CI typecheck + server-test jobs build platform packages first
  (deterministic against fresh installs).

Deprecated

• PUT /api/v1/policies/:orgId/kill-switch — superseded by canonical
  AGT POST/DELETE /api/v1/kill-switch; plugin migration scheduled
  for v0.4 (Cut 3).

Removed

• Cut 1 /api/v1/kill-switch/stream placeholder (superseded by
  /api/v1/events/:orgId/stream).
• Unused legacy admin helpers (getPolicy, getEffectivePolicy,
  updatePolicy, setKillSwitch) + EffectivePolicy type.

Fixed

• Dashboard reads AGT tables exclusively.
• README.md prettier nit that had been failing CI since 2026-05-19.

CI gate green across all jobs (Platform Tests, Server Tests, Plugin
Tests, Type Check, Lint & Format, Docker Build & Healthcheck).
547+ tests passing.