v0.6.1

0.6.1 (2026-10-01)

Features

• rules: add SG-MCP-002 — MCP tool preference manipulation (AST04) (closes #89) (#370) (f858b3c)
• rules: section-scoped context rules cap prose under a prohibition heading (closes #280) (#375) (d140035)
• rules: SG-MCP-003/004 — remote tool-source registration, disclosed and judged (AST02) (closes #289) (#376) (3c1b7fe)
• rules: SG-NET-002 catches a decoded blob piped or eval'd into a shell (closes #118) (#371) (47a16a3)
• skill: scan .tsx/.jsx/.rs/.go/.lua/.fish/.vbs as scripts (closes #187) (#374) (2bdbc52)

Bug Fixes

• attest: refuse symlinks on every write and rewrite SKILL.md atomically (closes #140) (#373) (9287b50)