v0.1.0-rc16

Changelog

Features

• fe6e42d: feat(creds): resolve only the secrets a run needs (@asapranidis)
• 1e1b741: feat(profile): drop optIn:, which no shipped profile uses (@asapranidis)
• 1179d5f: feat(profile): let a tmpfs say how big it is (@ananos)
• f3117c8: feat: add brig secret import (@asapranidis)
• dca404d: feat: add jsonfind and the stored-secret provenance codec (@asapranidis)
• b345314: feat: add the host-source reader the importer resolves through (@asapranidis)
• d2eafcc: feat: add volumes: and the files: binding it makes safe (@asapranidis)
• 8d551a4: feat: carry a value into the guest on stdin, never in argv (@asapranidis)
• b5bab74: feat: deliver a credential into an ephemeral .claude (@asapranidis)
• 2fe1443: feat: give secrets: an object form and env: a refs: chain (@asapranidis)
• 8bbe87c: feat: point at brig secret import now that the verb answers (@asapranidis)
• c0d7363: feat: rebuild the pre-boot expiry warning from stored provenance (@asapranidis)
• 4c418ff: feat: record where a stored secret came from, in the keychain comment (@asapranidis)
• acb444a: feat: report the imported guest login from stored provenance too (@asapranidis)
• 382a518: feat: rewrite the shipped Claude specs onto the new credential keys (@asapranidis)
• 75da1ef: feat: validate secret sources and ref chains at parse time (@asapranidis)
• eb5f7dd: feat: warn that hostCredential: and BRIG_CREDENTIALS_CMD are going (@asapranidis)

Fixes

• 2e03381: fix(creds): send an expired secret to the import form that can renew it (@ananos)
• 6ee4015: fix(hostsrc): pin the keychain tool, and tell a missing one from a refusal (@ananos)
• 2f32394: fix(profile): keep the user's own config across boots, and size the tmpfs (@ananos)
• b04d243: fix(secret): bound what --from-command reads, and keep its output out of brig's (@ananos)
• ed937fb: fix(secret): keep provenance honest across an update, a locator and a ceiling (@ananos)
• 8398bfb: fix: name the expired secret, and not a verb that does not exist yet (@asapranidis)
• 56e7bc3: fix: stop telling a user a declared secret is not declared (@asapranidis)

Refactors

• 479e0a1: refactor(wrap): mount each tmpfs with its own options (@ananos)

Documentation

• 2bde74c: docs(profile): replace the refresh-token unknowns with measurements (@ananos)
• cec3a17: docs(profile): say why the guest gets the refresh token too (@ananos)
• af24517: docs: correct the tmpfs mode finding in the stdin manual test (@asapranidis)
• f3bb521: docs: document the import verb, files:, volumes: and what they cost (@asapranidis)
• 8d1534d: docs: give import its own usage line, and mark BRIG_CREDENTIALS_CMD (@asapranidis)
• 7cfbfb3: docs: match the house style in prose and comments this change added (@asapranidis)
• 7831dc2: docs: record what claude-code deliberately lets go ephemeral (@asapranidis)
• 686560b: docs: scope the no-host-read promise, and say what an in-sandbox login costs (@ananos)