v0.2.0

0.2.0 (2026-09-24)

Features

• compare: warn when an aspect contradicts the overall relation (4dfcbf0)
• http: require a bearer token for non-loopback binds (cec103b)
• installer: pin the published PyPI package by default (ADR-0051) (bfa34d8)
• providers: retry transient upstream failures under one bounded policy (ADR-0057) (5d4f60b)

Bug Fixes

• default the HTTP port to 8088 and retry a taken bind (3ee9d3b)
• deps: bound runtime and optional dependencies to the tested series (e07c279)
• evals: bound the live cap to real requests with SDK retries off (c07d71c)
• evals: certify the AUTO operating point on locked_test and gate on it (a34e49b)
• exit cleanly when the HTTP port is already in use (616a689)
• extract: cover the worker spawn window against cancellation (927085e)
• hermetic listing test and NUL-separated git listing (11f1868)
• installer: honor the python floor in entries and verify (ADR-0053) (553bdb0)
• installer: record the post-write verify outcome in state (c5fe9a1)
• providers: classify resets, permanent transports, and the hard budget (1502fe9)
• providers: report budget-bound timeouts as exhausted retries (cd29bfb)
• report a checkout build identity on the wire (e536cc6)
• scan only repo-owned files for short fake secrets (7bdbd69)
• skip deleted-tracked files and pin the listing contract in a real repo (e661e8b)
• treat TIME_WAIT as free on the HTTP port probe (dded642)
• type the JSON fixture walk for pyright (d9bab9c)

Documentation

• add test-audit skill gating test authorship and audits (4a0d61a)
• bounded provider retries in the operator notes (ADR-0057) (c23acf5)
• explain CI guards and release checks (7912345)
• installer python request and checkout warning (ADR-0053) (3281a99)
• name the full sync that development and make typecheck need (d143a3a)
• note how to read an escalate from a low-confidence score (1f89be3)
• note that a flat jev_rerank ordering is weak (48bbbd5)
• readme: note the uncapped verify/screen input and the stdio provider deadline (0c12e9a)