v0.4.0

Added

• Added Claude hook MVP support with dry-run hook installation, guarded settings merges, active-session hook ingestion, and provider-neutral review confidence.

Fixed

• Serialized AgentReceipt event-log appenders so concurrent provider, marker, and filesystem watcher writes preserve a replayable hash chain.
• Enforced Codex provider privacy defaults so normalized events omit prompt text and raw tool output unless config explicitly opts in.
• Carried Codex provider risk signals into final review and receipt risk reasons.
• Applied explicit review config to quality-command detection and dependency, auth, secret-path, test, and typecheck policy decisions.
• Validated filesystem watcher identity before the stop fallback signals a recorded PID.
• Implemented read-only install codex detection for local Codex log availability.
• Added verify bundle for local CI-style verification of portable AgentReceipt artifact bundles.