0.2.0

Hook-grade shell guard for Pi, Grok, OpenCode, Claude, Codex, Cursor, Hermes, and OpenClaw.

What's new since 0.1.5

• Phase 8 secrets UX parity: Varlock schema import, secret provider CLIs (Infisical, Bitwarden, cloud CLIs) behind typed no-output errors, and an rv-secrets pre-commit hook that honors core.hooksPath and preserves foreign hooks
• Phase 7 enterprise hardening: MCP tool argument rules with exact-integer preservation, organization keys, a hash-chained audit log with at-least-once forwarding, and remote MCP upstreams with OAuth, revalidated tokens, and per-owner request binding
• Phase 6 security blockers: unforgeable approvals, cage tests, release signing plumbing, and CI hygiene
• Egress policy revisions with sealed-log crash atomicity and fail-closed workspace teardown
• Binaries now report 0.2.0 (rvd and rv-cli --version)

Note: this build is ad-hoc signed; the release runner reported "signing secrets are not configured; this release stage is unsigned", so Gatekeeper notarization does not apply.