v2.3.6

Changelog

• 7e0e51b Merge pull request #202 from jitpass/remove-consent-broker
• 64e55bf agent: remove consent brokering, both modes
• 87e40e4 keystores: back to the plain Touch ID, as 2.3.5 shipped it
• b6db3f1 agent: the trust prompt says what launched the run
• 264f843 agent: no name can rewrite the Touch ID sentence
• 074de99 agent: an app can show job proposals without brokering consent
• 97d77ee agent: the Touch ID sentence says who, then what, and no more
• 64e85b4 secureenclave: ask first only on a real access control, and say when it could not
• 486c820 secureenclave: a dialog the service can really take down
• 34269d0 consent: an approval answers only in the session it was given in
• 45cc1e8 Merge pull request #201 from jitpass/consent-review-fixes
• e36fed4 Merge pull request #200 from jitpass/consent-panel-broker
• a20258b agent: show the request beside the Touch ID, not in front of it
• e94eb04 Merge remote-tracking branch 'origin/touchid-cancel' into consent-panel-broker
• b270229 keychainwrap: put realChallengeCancel's comment on it
• 8d91f45 Merge remote-tracking branch 'origin/fewer-prompts' into consent-panel-broker
• d622539 keystores: a Touch ID the service can withdraw
• 2016e01 agent: one Touch ID for a credential on a locked vault
• e8aa5b2 consent: an approval slides while it is used, within the session's bounds
• 17a584e Merge pull request #199 from jitpass/touchid-cancel
• 7e11696 Merge pull request #198 from jitpass/fewer-prompts
• 087a6ab Merge pull request #197 from jitpass/consent-sync-spike
• 6547128 design: the broker re-checks a Deny after the fetch (step 2 review)
• bf9bc31 design: plan for the consent side panel (one question, one Touch ID)
• b8aed51 spike: the consent side panel and Touch ID, in step
• 4645a8d Merge pull request #196 from jitpass/job-carry-moved-values
• 684d0b7 docs: regenerate the move-out command reference
• 6c8b22e jobs: a value moved out of the vault follows the job, or stops it