v0.2.0

What's Changed

• ci(release): filter release artifact downloads by @jscott3201 in #174
• feat(plugin): add Aionforge Memory agent plugin by @jscott3201 in #175
• feat(plugin): make memory skills proactive by @jscott3201 in #176
• feat(plugin): add Claude memory workflows by @jscott3201 in #177
• docs(plugin): document Codex plugin policy by @jscott3201 in #178
• fix(cli): report WAL recovery failures from doctor by @jscott3201 in #179
• feat(mcp): bind bearer tokens to principals by @jscott3201 in #180
• fix(capture): fail closed on embedder errors by @jscott3201 in #181
• fix(cli): check embedder health before serving by @jscott3201 in #182
• docs(ops): document backup and volume migration by @jscott3201 in #183
• feat(retrieval): explain verbose compact recall output by @jscott3201 in #184
• docs(runtime): add Apple container support by @jscott3201 in #185
• fix(retrieval): anchor exact lexical hits by @jscott3201 in #186
• test(retrieval): add sanitized project memory corpus by @jscott3201 in #187
• fix(plugin): use Codex bearer token manifest by @jscott3201 in #188
• test(retrieval): strengthen project memory corpus baseline by @jscott3201 in #189
• docs(mcp): document token rotation by @jscott3201 in #190
• fix(docker): recover Selene WAL on glibc runtime by @jscott3201 in #191
• fix(plugin): avoid Codex MCP namespace collision by @jscott3201 in #192
• Fix Codex plugin MCP registration by @jscott3201 in #193
• fix(mcp): remove static bearer auth from local HTTP by @jscott3201 in #194
• docs: add public agent guide by @jscott3201 in #195
• fix(mcp): close out dogfood feedback by @jscott3201 in #196
• feat(mcp): close deferred dogfood feedback by @jscott3201 in #197
• feat(mcp): close deferred identity and recall followups by @jscott3201 in #198
• fix(mcp): harden principal handoff summaries by @jscott3201 in #199
• fix(plugin): stop registering claude and cursor mcp servers by @jscott3201 in #200
• ci: move ubuntu test suite to the development -> main release gate by @jscott3201 in #201
• ci(release): attest SLSA build provenance for release binaries and image by @jscott3201 in #202
• feat(mcp): report a live memory count in server_status by @jscott3201 in #203
• feat(mcp): add batch_capture tool for array memory writes by @jscott3201 in #204
• fix(mcp): exclude system-role memories from read_memory and session_manifest by @jscott3201 in #205
• feat(mcp): read_memory reads many ids and full bodies by @jscott3201 in #206
• build(deps): pin selene-db to crates.io 1.2.0 by @jscott3201 in #207
• fix(store): map selene UnsupportedVersion to a distinct StoreError + recreate runbook by @jscott3201 in #208
• refactor(store): single-source-of-truth vector-index kind (keystone) by @jscott3201 in #209
• perf(store): adopt TurboQuantCosine for the Episode/Fact vector indexes by @jscott3201 in #210
• feat(store): surface vector index memory/health stats in the doctor by @jscott3201 in #211
• perf(store): share one plan-cache pair across short-lived request sessions by @jscott3201 in #212
• feat(store,retrieval): bound slow recall CALLs with a mid-statement deadline by @jscott3201 in #213
• feat(store): bound small-enum and fixed-width columns with STRING(n) by @jscott3201 in #214
• feat(store): mirror DECIMAL and BYTES property kinds faithfully by @jscott3201 in #215
• feat(store): enable selene-db metrics for plan-cache and cancellation observability by @jscott3201 in #216
• test(config): make figment::Jail config tests hermetic vs inherited AIONFORGE_ env by @jscott3201 in #217
• feat(mcp): instrument recall served-bytes through the metrics facade by @jscott3201 in #218
• feat(mcp): expose pin/unpin over MCP by @jscott3201 in #219
• feat(mcp): bake the git SHA into server_status (build provenance) by @jscott3201 in #220
• feat(config): default-OFF [auth] resource-server config block (PR1) by @jscott3201 in #221
• feat(config): promote serve HTTP knobs into a [server] config block (fork#6) by @jscott3201 in #222
• feat(auth): aionforge-auth — OIDC/JWKS discovery + RS256-pinned JWT validation (PR2) by @jscott3201 in #223
• docs: contributor scaffolding — PR/issue templates, CONTRIBUTING, SECURITY, AGENTS/README refresh by @jscott3201 in #224
• feat(auth): operator capability + operator-aware authority + claims->Principal mapper (PR3) by @jscott3201 in #225
• feat(auth): thread ValidatedPrincipal through rmcp extensions + reject-on-absent precedence + CI mint-site gate (PR4) by @jscott3201 in #226
• feat(auth): wire the Tower JWT validator into the request path — RFC 9728 + 401/403 + operator authorizer + posture (PR5) by @jscott3201 in #227
• feat(config): per-deployment [auth]+[server] blocks with a fail-closed runtime selector (PR6b) by @jscott3201 in #228
• chore: repoint repository URLs to jscott3201/aionforge-memory (org→personal move) by @jscott3201 in #229
• feat(mcp): resolve all 7 lifecycle kinds in read_memory, not just episodes by @jscott3201 in #230
• feat(work-structure): WorkItem + Tag node kinds and the HAS_TAG facet (PR1 — domain + store schema) by @jscott3201 in #231
• feat(work): guarded work_status CAS + signed WorkStatusChange audit + exemption locks (PR2) by @jscott3201 in #232
• feat(work): re-parent/reorder/tag store mutators, work census, and read_memory of work items (PR3a) by @jscott3201 in #233
• feat(work): MCP work-tool cluster (create/advance/link/tree/query) + server_status census (PR3b) by @jscott3201 in #234
• feat(plugin): nudge proactive memory + work-item capture across Claude Code and Codex (PR4) by @jscott3201 in #235
• feat(plugin): extend the memory/work-item nudge to Cursor, OpenCode, and the landscape tier; bump to 0.2.0 (PR5) by @jscott3201 in #236
• docs: refresh the tool-surface docs to the full 18-tool MCP surface by @jscott3201 in #237
• chore(release): bump project version 0.1.0 -> 0.2.0 by @jscott3201 in #238
• fix(docs): resolve rustdoc intra-doc-link warnings (unblocks release-gate) by @jscott3201 in #240
• release: v0.2.0 by @jscott3201 in #239

Full Changelog: v0.1.0...v0.2.0