core v2.2.0
Added
- Canonical agent-root layout and a read-only virtual
skills/root.
Changed
- Remote sandboxes require an explicit compute-only capability setting.
Breaking
- Workspace or skills symlinks that resolve outside their respective roots are now rejected. Move their targets inside the agent's
workspace/,data/, orskills/layout.