RustyClaw v0.3.0

What's Changed

• chore: audit fixes — Windows install, SDK docs, drop browser scaffolding by @ForkedInTime in #3
• docs: add browser automation to README pitch by @ForkedInTime in #4
• ci: guardrails to keep README claims honest by @ForkedInTime in #5
• feat: autonomous browser agent — /browse, CLI, SDK, voice by @ForkedInTime in #6
• fix(browser): enterprise audit sweep — 10 production-readiness fixes by @ForkedInTime in #7
• feat(browse): wire Step/ApprovalNeeded progress + voice milestones by @ForkedInTime in #8
• fix(browse): CDP page target + approval URL sync by @ForkedInTime in #9
• fix(audit): click URL refresh, approval button-text matching, settings wiring by @ForkedInTime in #10
• fix(audit): enterprise hardening — sandbox, browser, session atomicity by @ForkedInTime in #11
• fix: security boundary hardening, stream/scrollback bounds, SDK-compatible auth by @ForkedInTime in #12
• fix(sandbox): stop claiming strict mode is isolation; gate clippy in CI by @ForkedInTime in #13
• fix: autocommit CAS + prune tie-break, bwrap --new-session, cost estimates, tool schema contract by @ForkedInTime in #14
• fix(security): prefix allow-rules were bypassable by command chaining by @ForkedInTime in #15
• fix(security): symlinks and Grep bypassed the sensitive-path deny-list by @ForkedInTime in #16
• fix(fs): atomic writes, real MultiEdit atomicity, bounded glob results by @ForkedInTime in #17
• fix(session): a torn write no longer destroys the whole conversation by @ForkedInTime in #18
• fix(session): repair unanswered tool_use so a recovered session stays usable by @ForkedInTime in #19
• fix(api): retry 429/5xx with backoff, and stop replaying streamed responses by @ForkedInTime in #20
• release: v0.3.0 — clear 8 dependency advisories, harden self-update by @ForkedInTime in #21

Full Changelog: v0.2.0...v0.3.0