v0.2.1

0.2.1 (2026-09-25)

Bug Fixes

• evals: carry the partial evidence on the readers-never-stopped path too (825c8fb)
• evals: never return a silently partial agent transcript (b72c53a)
• install: build the verify error tail after the drain has finished (637c996)
• server: the served regex pool starts warm (ADR-0058) (99ac61e)

Documentation

• add a PyPI download count badge to the README (39b1544)
• the passing-case evidence moves to the branch head (fee5188)
• the pre-push gate in contributing and ADR-0056 (0ba2cfb)

Continuous Integration

• base the linux leg on the slim uv image with a checksum-verified node (fe32b0d)
• block pushes on the full ci workflow, native and linux (ADR-0056) (060880e)
• emulate security-one-cpu with the job's own docker run contract (9b73bd0)
• guard the watchdog's pkill against the not-yet-started race (0de3ee7)
• make the gate hermetic, bounded, checkout-agnostic, and pushed-commit-faithful (2e19b66)
• mirror ci.yml's security-one-cpu job in the linux leg (71a17b0)
• reap orphans in the linux leg with --init (53cb5e7)
• run the linux leg as a non-root runner with the tools the tests shell out to (b842154)
• run the ReDoS storm contract on a one-CPU quota (81e8022)
• stop the one-cpu image lookup dying on a flaky sigpipe (eb41999)