v0.6.0

0.6.0 (2026-08-05)

Added

• api: report the resolved network enforcer so the dashboard cannot offer what it cannot enforce (82d880d)
• cloud: turn on governed network access — chart 0.5.1 + the Cilium enforcer (e94729a)
• network-grant dashboard UI — govern sandbox egress from the dashboard (5f6287e)
• web: authorize a parked network grant from the timeline (ca0b2da)
• web: declare an agent's network needs on a revision (13ee4a6)
• web: edit the sandbox egress ceiling in Governance (e0c9957)
• web: narrow a single run to offline from the composer (b0d0ff0)
• web: shared target editor for network grant rules (c39895f)
• web: type mirrors and presentation helpers for network grants (4b6fa7d)

Fixed

• web,api: review fixes — preserve the allow catalog across ceiling switches, never fabricate a declaration, persist and reset the run narrowing choice, pin enforcer delegation (21108b4)

Documentation

• cloud: record the Cilium cutover, its two upstream bugs, and the last mile (33b0524)
• plan: implementation plan for the network-grant dashboard UI (8dffed5)
• spec: governed sandbox egress, selectable in the dashboard (395bdab)