ryk v0.2.21

What's Changed

• fix(sandbox): pin launch argv OOM ownership without a live Environ.Map by @christopherkarani in #514
• test(hook): isolate leftover-ask fixture from ambient CI by @christopherkarani in #516
• fix(policy): allow host skill and AGENTS.md reads outside workspace by @christopherkarani in #513
• fix(cli): drop Rust daemon claims from help catalog by @christopherkarani in #517
• fix(cli): reuse plugin PATH snapshot in doctor host rows by @christopherkarani in #518
• docs(mcp): document workspace .ryk/mcp manifests by @christopherkarani in #521
• perf(shell_engine): yield waiters during registry init by @christopherkarani in #520
• perf(cli): parse deadlock corpus once and share embed by @christopherkarani in #519
• fix(cli): drop cursor from stop help and uninstall dry-run by @christopherkarani in #512
• fix(cli): remap leftover unused ask in one helper before hosts see it by @christopherkarani in #522
• fix(hosts): rewrite leftover unused policy ask on coding-host wires by @christopherkarani in #524
• docs: untrack stale docs/agent-handoffs pack by @christopherkarani in #510
• fix(cli): packs default is count + one next by @christopherkarani in #509
• fix(cli): honest --json help and replay --list JSON by @christopherkarani in #504
• docs(compatibility): map session sandbox grades to canonical grades by @christopherkarani in #505
• fix(intercept): bound proxy upstream dial without ConnectOptions.timeout by @christopherkarani in #506
• fix(cli): drop process-level shield banner by @christopherkarani in #508
• fix(cli): color only DENY Decision on test/explain by @christopherkarani in #507
• docs(redteam): document --ci exit codes 0/1/2/6 by @christopherkarani in #523
• fix(hosts): fail-close unexpected Pi evaluate leftover ask by @christopherkarani in #525
• fix(cli): one next on public help, not start-or-help-all by @christopherkarani in #511
• fix(cli): honest in-process engine on start and doctor by @christopherkarani in #359
• perf(scan): cache walkCollect host discovery walks by @christopherkarani in #498
• perf(cli): stream-scan last session audit_degraded in doctor by @christopherkarani in #502
• fix(mediate): fail-closed privilege, rm-rf, curl dest, shims, replay, .env write by @christopherkarani in #526
• fix(feed): redact user-controlled fields on JSONL load (#298) by @christopherkarani in #472
• fix(sandbox): keep ancestor instruction as a file OS grant by @christopherkarani in #527
• ci(openclaw): check committed dist on release only by @christopherkarani in #503
• fix(cli): drop doctor linear box walls (#205) by @christopherkarani in #528
• fix(cli): stop test/explain DENY Next ping-pong (#239) by @christopherkarani in #529
• fix(sandbox): skip git objects and ryk sessions in Seatbelt hardlink scan by @christopherkarani in #530
• fix(hook): allow workspace symlink reads to host skills by @christopherkarani in #531

Full Changelog: v0.2.20...v0.2.21