v0.300.0

What's Changed

• refactor(cli): extract resource-policy classification and messages from god file (#9279) by @chubes4 in #9439
• fix(runtime): bound retained run directories by @chubes4 in #9438
• Fix component-scoped monorepo release notes by @chubes4 in #9440
• refactor(agents): extract lab-handoff reconciliation from lifecycle_ops god file by @chubes4 in #9441
• Honor release scope exclusions in component notes by @chubes4 in #9444
• Enforce durable changelog provenance by @chubes4 in #9447
• Reconcile stale runner generations and timed-out handoffs by @chubes4 in #9448
• Enforce accepted immutable deployment provenance by @chubes4 in #9446
• refactor(agents): move cook test module to sibling file via #[path] by @chubes4 in #9449
• fix(agents): validate the declared base before mutating the target worktree (#9400) by @chubes4 in #9445
• refactor(agents): route validate_runner_job_snapshot through canonical RunnerJobIdentity by @chubes4 in #9452
• feat(agents): enforce public contract evidence by @chubes4 in #9456
• fix(review): reject manual release-owned version changes by @chubes4 in #9455
• fix(core): default absent worktree-provider safety flags to permissive (#7886) by @chubes4 in #9454
• fix(runtime): harden retained run ownership by @chubes4 in #9453
• Add durable controller daemon jobs by @chubes4 in #9457
• refactor(agents): complete handoff-identity consolidation — 100% RunnerJobIdentity adoption by @chubes4 in #9458
• refactor(agents): consolidate provider-model resolution behind AgentTaskOutcome::selected_model by @chubes4 in #9460
• fix(runtime): close retained run lifecycle races by @chubes4 in #9461
• fix(runner): probe admission readiness before refresh-homeboy reports success by @chubes4 in #9488
• fix(runtime): finish remaining run directory callers by @chubes4 in #9489
• fix(runner): read retained runner evidence past a stale admission daemon by @chubes4 in #9490
• fix(runner): stop parsing generic runner-exec stdout as an agent-task run-plan by @chubes4 in #9524
• fix(audit): command_wrapper_bypass exempts sibling thin wrappers with different return contracts by @chubes4 in #9526
• refactor(core): route genuine git-toplevel/short-HEAD bypasses onto canonical helpers by @chubes4 in #9527
• fix(runtime): close remaining run retention gaps by @chubes4 in #9528
• feat(audit): detect lossy policy projections by @chubes4 in #9530
• feat(agent-task): resume durable cook-batch finalization after coordinator exit by @chubes4 in #9532
• refactor(agents): narrow same-file-only action_state helpers to private (dead_code) by @chubes4 in #9531
• refactor(core): route git status --porcelain emptiness check onto status_porcelain helper by @chubes4 in #9529
• refactor(agents): narrow same-scope-only artifact helpers to private (dead_code) by @chubes4 in #9535
• Start Lab handoff lease at runner submission by @chubes4 in #9536

Full Changelog: https://github.com/Extra-Chill/homeboy/blob/v0.300.0/docs/changelog.md