v0.18.0

Changelog

• 81abd1f Add commit-msg hook with docs-only exemption [SC-74]
• 5a459ee Add url.PathEscape to API client path parameters [SC-72]
• 14d9a38 Bind daemon to localhost by default to prevent network exposure [SC-71]
• 3e6acdb Default-deny Telegram allowlist to prevent unauthenticated RCE [SC-71]
• d7b34e2 Fix FTS5 escaping, JSON injection, dir perms, delete confirm, input validation [SC-72]
• 5ee8874 Fix WIQL injection, HTTP URL warning, token fallback, YAML escaping [SC-72]
• d5a1a6c Fix safe mode bypass and destructive op confirmation bypass [SC-71]
• 2b86b08 Harden daemon: constant-time auth, env allowlist, connection limit, token redaction [SC-72]
• bb77e72 Move TUI confirm prompt from footer to centered modal dialog [SC-75]
• 4c4aad6 Pin CI actions to SHA, add permissions and security job, filter MCP env [SC-72]
• 23054a7 Prevent self-approval of destructive operations [SC-71]
• 8a47f2e Restrict devcontainer mount to ca.crt only [SC-71]
• 4acaf42 Strengthen FUSE redaction, SafeProvider, and config permissions [SC-72]
• 46d15c6 Strip control characters from Telegram dispatch prompts [SC-71]
• 3316d89 Suppress unfixed Moby/docker false positives in govulncheck [SC-73]
• 1a412f9 Update README tagline to 'The AI Software Factory' positioning
• 240eaf5 Validate CA certificate fetched from daemon over TCP [SC-71]