v4.7.0

4.7.0 (2026-07-15)

Bug Fixes

• security: close the six release-gating gaps from the Oracle follow-up review (7e37faf)
• security: fail-closed managed blocks, symlink containment, strict consent boundaries (98961e7)
• security: fail-closed README sync, non-regular config refusal, indeterminate roster warnings (2155949)

Features

• doctor: add agent operations contract, md doctor, and managed roster card (31ff40d)
• init: first-run agent handoff and flows-first agent guidance opt-in (4ce2b8f)