v0.6.0

0.6.0 (2026-09-28)

Features

• action: scan a folder of skills from the default path (M9-09) (#359) (67b3d71)
• cli: scan --installed and surfaceguard locations (M9-07) (#356) (124e9d8)
• cli: scan <path>... — folder discovery and many paths (M9-05) (#354) (a55408c)
• cli: verify many skills — folders, paths and --installed (M9-10) (#360) (d7f452c)
• locations: embedded registry of agent skill locations (M9-06) (#355) (5d3155b)
• policy: waive a whole skill pinned to its Merkle root (#363) (9f7227f)
• report: multi-bundle SARIF — one run, root-relative URIs (M9-04) (#353) (c4ef94a)
• scan: multi-bundle scan engine and aggregate text/JSON report (M9-03) (#352) (cc52439)
• skill: Discover() — bounded, symlink-safe, deterministic bundle discovery (M9-02) (#350) (b438ac2)

Bug Fixes

• guard: verdict cache served stale decisions after a signature swap, a waiver expiry or an attestation expiry (#357) (9799aa6)
• rules: widen and narrow SG-EXE-004 — systemd/Windows/login-item persistence; crontab and rc leaves no longer fire on prose or SQL (#361) (9ac13ea)
• skill: classify .mcp.json, per-IDE and one-file-per-tool MCP manifests as configs (#187) (#362) (99f9db5)

Miscellaneous Chores

• release 0.6.0 (58066e0)