Release v0.2.1 · christopherkarani/rv

What's Changed

feat(guard): Laya judge lane (CoreML) + guard observe mode by @christopherkarani in #423
feat(onboarding): rv init, secrets fast path, mcp onboard, guided fixes by @christopherkarani in #424
docs(readme): short, developer-first README by @christopherkarani in #427
fix(secrets): deny instead of skip on operand overflow in SecretPathGuard by @christopherkarani in #421
feat(hook): mutual daemon authentication for C and Swift hook clients by @christopherkarani in #428
feat(mcp): hard-flip tool defaults to deny and require sandboxes by @christopherkarani in #429
feat(mcp): fail closed on same-user key custody; direct never passes check by @christopherkarani in #431
Ship Laya judge weights via Hugging Face, fetch in curl installs by @christopherkarani in #430
feat(release): Linux release builds with per-target assets by @christopherkarani in #432
fix(secrets): resolve symlink aliases through the secret path guard by @christopherkarani in #422
Fix one-line installer (unsigned-era verify), install smoke gates, v0.2.1 by @christopherkarani in #433
Fix release Linux smoke host (claude-code renamed to claude) by @christopherkarani in #434
Ship Swift runtime libs with Linux releases (fix install smoke) by @christopherkarani in #435

Full Changelog: v0.2.0...v0.2.1