v0.18.0

What's Changed

• feat(console): :reopen a refused policy loosening by @DavidGodefroid in #177
• fix(console): record the :review policy diff with its question (#160) by @DavidGodefroid in #178
• feat(managed): trust the stamp lox writes after verifying the signature on the host (#175) by @DavidGodefroid in #179
• agentwire: allow nothing for a foreign MCP entry; product consent note (#109) by @DavidGodefroid in #181
• feat(console): export LoadManaged and CheckManaged for products with their own start-up (#176) by @DavidGodefroid in #182
• feat(ticket): human-typed inputs sealed in a plan ticket's decision (#174) by @DavidGodefroid in #183
• fix(console): record start questions on first start (#180) by @DavidGodefroid in #184
• verbs, config: review follow-ups of #117/#119; remove auto-mode deprecations (breaking) by @DavidGodefroid in #186
• feat(pii): public PII detection bench with a CI baseline (#129) by @DavidGodefroid in #185
• feat(update): PublicKey trust roots in VerifyFiles (#15) by @DavidGodefroid in #187
• release: v0.18.0 by @DavidGodefroid in #188

Full Changelog: v0.17.0...v0.18.0