v2.1.11

Commits

• f18ecc5 Merge pull request #141 from DevinoSolutions/release/2.1.11
• 8ae59ce release: 2.1.11
• 5d5e775 Merge pull request #140 from DevinoSolutions/feat/F891-stealthy-cli
• 3da8220 docs(F-891): scope CLAUDE.md's no-traceback claim to the tool verbs (round 6b, review of 99e3eda)
• 99e3eda docs(F-891): the dispatch guard is documented; ops-verb residuals owned (round 6)
• bc64d2d fix(F-891): guard the dispatch, not only the flush; EINVAL arm Windows-only (round 5)
• b09f3e7 fix(F-891): one flush in main, errno-keyed pipe judgement, unraisable _abandon_stdout (round 4)
• 81086bd fix(F-891): close the exit-120 hole on the SUCCESS path too, and three smaller doors
• 7fb3d9d Merge origin/main (7b990e4, F-892..895) into feat/F891-stealthy-cli
• 7b990e4 Merge pull request #139 from DevinoSolutions/fix/F892-F895-snapshot-truth
• 1f3596c docs(F-891): cli.py is 981 LOC, not 985 — the fourth wrong number for one file
• db26a23 test(F-891): one pin per claim, and document 141 on every surface that states the set
• dfcbc44 fix(F-891): close the last two doors out of the exit-code set, and stop --traceback shipping the payload
• dc0773e docs(F-894): the resolver asks require_allowed once — say so where three sentences still said twice
• 65011d3 fix(F-894): refuse a reserved user_data_dir before the host-shaped guard
• 1eee656 fix(F-891): close the exit-code set, pin the session DELETE, and stop losing the instance id
• eed4ae9 fix(F-894): refuse a reserved profile path BEFORE the F-888 re-attach, on every platform
• c13b12a feat(F-891): drop stealthy spawn --master before it ships
• a4b4741 feat(F-891): stealthy — one CLI that can also drive the backend's tools
• 6e3424e fix(F-892/F-893/F-894/F-895): the snapshot seed tells the truth about itself