v0.3.0

What's Changed

• fix: fail closed on credential refs and workspace policy by @masonwyatt23 in #2
• fix: publish Locus v0.2.0 Homebrew checksum by @masonwyatt23 in #4
• feat: dual-control UX, sandbox workers, verify session by @masonwyatt23 in #5
• feat: partial dual-control notify for second principal by @masonwyatt23 in #6
• feat: harden top adapter upstream MCP recipes by @masonwyatt23 in #7
• sync: hub drop-in LOCUS_ENFORCE pre-mutate + scrubbed mint env by @masonwyatt23 in #8
• docs: mark hub Locus gate PRs landed on GOALS M4 by @masonwyatt23 in #9
• feat: integrate approval authority and sandbox readiness by @masonwyatt23 in #10
• test: composite top-adapter upstream recipes + exclusive catalog by @masonwyatt23 in #11
• feat: locus watch session heartbeat for hub (M5) by @masonwyatt23 in #13
• feat: audit export webhook sink (M5 SIEM partial) by @masonwyatt23 in #12
• sync: hub drop-in firm config.locus.enforce + runTask call sites by @masonwyatt23 in #14
• feat: adapter registry v0 (catalog list/verify + signed roadmap) by @masonwyatt23 in #16
• feat: streamable-HTTP-lite MCP polish (M5 partial) by @masonwyatt23 in #17
• feat: multi-client dogfood install probe (M3) by @masonwyatt23 in #15
• docs: update GOALS M4 for hub firm profile + session mint landings by @masonwyatt23 in #18
• feat: Linux worker sandbox partial (bwrap / path) — M5 by @masonwyatt23 in #20
• sync: hub drop-in locus.firm → enforce (hub #258) by @masonwyatt23 in #19
• docs: mark hub #256/#257 session mint paths done by @masonwyatt23 in #21
• docs: multi-account dogfood playbook + pin walk script (M3) by @masonwyatt23 in #22
• fix: stabilize supervisor identity test under CI load by @masonwyatt23 in #27
• feat(locus-mcp): Mcp-Session-Id for streamable HTTP by @masonwyatt23 in #25
• feat: opt-in sandbox network deny for workers by @masonwyatt23 in #26
• feat: ed25519 adapter registry signatures (+ HMAC backcompat) by @masonwyatt23 in #23
• feat: multi-message SSE + GET /mcp/sse session ticks (M5 partial) by @masonwyatt23 in #24
• test(e2e): feature-detect HTTP MCP session + SSE probes by @masonwyatt23 in #28
• feat: dual-IDE dogfood matrix without secrets (M3) by @masonwyatt23 in #29
• feat: production adapter trust store under ~/.locus/trust/ by @masonwyatt23 in #32
• sync: hub drop-in watch/verify session heartbeat (hub #273) by @masonwyatt23 in #30
• feat(locus-mcp): cross-process Mcp-Session-Id resume (file-backed) by @masonwyatt23 in #31
• feat: cross-process pin-swap anchoring, hardened setup, TTL, client add, Grok/Claude wiring by @masonwyatt23 in #33
• release: v0.3.0 by @masonwyatt23 in #34

Full Changelog: v0.2.0...v0.3.0