v0.3.2

Highlights

• Added fail-closed conditional fallback policies with per-tool on failure allowlists, actual-attempt max_fallback_attempts caps, transport-failure classification, and complete original-primary/immediate-trigger provenance.
• Added schema-versioned JSON receipts for --version, check, plan, run, implement, and tools test, with immutable source/effective configuration checksums and provider reasoning effort.
• Added tool-level working-directory, environment allowlisting/overrides/unsets, closed stdin, and configured environment-value redaction.
• Added config schema v2 with mandatory requires_cli_router: ">=0.3.2,<0.4.0", while retaining version 1 compatibility.

Fixes

• Conditional fallback selection now scans past nonmatching policies without consuming the attempt cap.
• A failed fallback's classification becomes the immediate trigger for later policies while unsafe failures remain terminal.
• Receipts remain bound to the exact configuration loaded even if the source file changes during execution.