v0.4.0

[0.4.0] - 2026-06-01

Added

• Supply-chain: sluice lock - write a committable inventory of the built image (every apk + global npm package with version + digest); sluice update re-resolves and relocks. sluice lock --check is a CI drift gate (fails if the image differs from sluice.lock); sluice lock --sbom emits a deterministic CycloneDX 1.5 SBOM for scanners.
• Agent session persistence (SLUICE_STATE_DIRS) - a coding agent's history, sessions, and auth survive a rebuild, sluice stop, or reboot, via a per-project host store.
• sluice learn --print - emit the proposed egress allowlist to stdout (review / CI).
• sluice learn --apply - write the allowlist and rebuild in one step.
• Nix gallery example + SLUICE_SETUP_ROOT_CMDS (a build-time root hook) - run a reproducible, pinned Nix toolchain inside a sluice, contained at runtime.
• SLUICE_ALLOW_IPS database-egress demo - reach a fixed-IP, non-HTTP service (Postgres/Redis/MySQL) through the firewall's escape hatch.
• Codex and Gemini agent presets verified through the harness - all seven presets are now cred-free verified.
• Update check in sluice version - flags a newer release when one is available (SLUICE_NO_UPDATE_CHECK=1 to disable).

Changed

• sluice help is grouped into sections (Common / Build & lifecycle / Inspect / Meta).
• test/verify-runtimes.sh runs the runtime fixtures in parallel.
• README: an "Updating sluice" section, plus gallery and command-surface docs. The CLI surface is pre-1.0 and may still change before 1.0.

Full changelog: v0.3.1...v0.4.0