embedctl 0.2.3

Scope notes

• Track follow-up 0.2.x fixes after the 0.2.2 release here.

Release operations

• Fixed release note file handling for environments where gh release create --notes-file cannot read /tmp paths.
• Added a reusable generic public safety guard for CI and release gates, while keeping project-specific residue rules in private overlay scanners.

MCP and downstream agent setup

• Added the local embedctl_mcp stdio adapter and installer path so downstream OpenCode workspaces can register embedctl-mcp without invoking Dart directly.
• Kept MCP serverInfo.version, CLI --version, package versions, and VERSION aligned under the shared release train.

Host-side visual evidence

• Added modular host-camera visual source discovery and single-frame capture through the ffmpeg_v4l2 backend.
• Added public-safe visual_sources.host_camera profile declarations while rejecting host-local camera device paths in public profiles.

Performance evidence and gates

• Added structured runtime performance artifacts under performance/ for steady profiling, workload profiling, frame telemetry, scanner telemetry, and lifecycle telemetry.
• Added release-check --performance-policy <path> so explicit performance gates participate in release evidence instead of living in project-specific checklists.
• Added performance proof and metric diffs to evidence inspect and evidence diff while preserving redaction validation.
• Added public-safe observability target profile declarations for supported telemetry and frame-source metadata.

Downstream agent integration

• Added docs/downstream-agent-integration.md for wiring embedctl into downstream project AGENTS.md, private profile overlays, adapter manifests, and evidence workflows.
• Added examples/agent-guides/ with copyable public-safe AGENTS.md, adapter manifest, and target profile starter templates.

Verification

• bash scripts/verify.sh passed during release preparation.
• python3 scripts/check-public-safety.py passed during release preparation.
• The private overlay residue scanner passed during release preparation.

Verification

• bash scripts/verify.sh passed locally before release.
• GitHub Actions CI passed for this release commit.