v2.20.1
What's Changed
- fix(#547): deterministic parent-death detection via PR_SET_PDEATHSIG + ppid poll by @tcconnally in #550
- security: internal vulnerability-response policy (OSTIF step 3) by @tcconnally in #558
- bench(#475): LongMemEval 73.6% — beats Zep (63.8%), official metric, signed + independently verified by @tcconnally in #557
- fix(#547): orphan-reap guard false-fires when vault is born under PID 1 (container entrypoint) by @tcconnally in #559
- ci: add CodeQL SAST for the Rust source by @tcconnally in #560
- docs: security knowledgebase index + escalation milestones (OSTIF steps 6-7) by @tcconnally in #564
- docs: confirm access-register roster + branch protection (follow-up to #564) by @tcconnally in #565
- feat(#561): official Python client for the MCP stdio transport by @tcconnally in #566
- docs: record Mark as repo admin in access register by @tcconnally in #568
- ci: add SLSA build provenance (signed attestations) to releases by @tcconnally in #569
- release: v2.20.1 (validate SLSA provenance) by @tcconnally in #570
Full Changelog: v2.20.0...v2.20.1