v0.9.0

[0.9.0] - 2026-07-10

Added

• feat: default to strict access in agent contexts
• feat: add operator self-scoping for the agent policy
• feat: add murk agent init onboarding command
• feat: add murk mcp stdio server subcommand
• feat: implement murk_plan and murk_get mcp tools
• feat: add murk_exec mcp tool behind --allow-exec

Documentation

• docs: add release verification guide and pin PyPI attestations
• docs: document the murk mcp server for agents
• docs: document murk mcp in the command reference and threat model
• docs: correct the pip install package name
• docs: refresh roadmap with 1.0 readiness criteria

Fixed

• fix: reject NUL byte in secret value before env injection

Other

• chore: ignore local mnemopi banks directory
• test: cover mcp server protocol edge cases
• test: add mcp client interop and exec output-cap tests
• chore: release v0.9.0