v0.2.0

What's changed

Added

• Add opt-in policy decision tracing through the Cordis logger.
• Report the tool name, decision, matched rule number or default-policy source, and configured reason without copying tool arguments.

Improved

• Keep trace exporter failures from changing allow, ask, or deny outcomes.

Documentation

• Document trace configuration and its boundary relative to Harness session audit and capability sandboxing.
• Clarify the next roadmap items for presets, real-world recipes, and stable Harness compatibility.

Upgrade

Install dsh-tool-policy@0.2.0 and enable tracing only when decision diagnostics are useful:

config:
  trace: true

Tracing is disabled by default and does not replace Harness sandboxing, approval, or audit controls.

Validation

Validated with type checking, linting, formatting, 19 Vitest tests, the production build, the Loader integration demo, and an npm pack dry-run.