v0.2.0

0.2.0

MCP stdio proxy gated by the IntentLedger.

• actgate mcp --upstream <cmd...> — forward tools/list; gate tools/call
• First call → propose + ACTGATE_PENDING (no upstream)
• After actgate approve <id>, identical tool+args → one upstream execute (ledger execute before call)
• Deny / already-executed paths never re-hit upstream
• Only tools/call is gated; other MCP methods pass through