Calcifer v0.1.0-alpha.5

Verify SHA256SUMS and GitHub artifact attestations before installation.

What's Changed

• feat: remove managed profiles crash-safely by @kazu-42 in #39
• feat: gate Codex handoff compatibility by @kazu-42 in #40
• test: signal child process groups directly by @kazu-42 in #44
• ci: consume full libtest discovery output by @kazu-42 in #47
• feat: add no-gap guardian lease transfer by @kazu-42 in #45
• Extract bounded Codex remote transport by @kazu-42 in #49
• Add bounded guardian supervisor authority foundation by @kazu-42 in #51
• Add readiness-gated Unix PTY supervisor by @kazu-42 in #53
• feat: integrate supervised Codex runtime and retained recovery by @kazu-42 in #68
• Harden package supervisor diagnostics, handshakes, and teardown by @kazu-42 in #85
• feat(routing): add private user-level registry by @kazu-42 in #97
• Preserve exact resume-apply failure origins by @kazu-42 in #98
• Await resumed PTY size propagation by @kazu-42 in #99
• Add durable conversation lineage schema v2 by @kazu-42 in #100
• Add validated Codex rollout handoff capability by @kazu-42 in #101
• Bound descriptor isolation scans without starving terminal output by @kazu-42 in #102
• feat: add transactional Codex handoff kernel by @kazu-42 in #103
• feat: add bounded Codex usage observation cache by @kazu-42 in #104
• fix: preserve official TUI job-identity subtypes by @kazu-42 in #106
• feat: add guarded Codex pool selection by @kazu-42 in #105
• fix: preserve TUI readiness failure subtypes by @kazu-42 in #107
• fix: classify macOS descriptor observations by @kazu-42 in #108
• test: make privileged-bit policy deterministic by @kazu-42 in #110
• fix: make foreground handoff transactional by @kazu-42 in #109
• ci: bound pinned Codex archive extraction by @kazu-42 in #111
• chore(deps): bump the actions-minor-patch group across 1 directory with 2 updates by @dependabot[bot] in #81
• chore(deps): bump the rust-minor-patch group across 1 directory with 8 updates by @dependabot[bot] in #96
• chore(deps): bump signal-hook from 0.3.18 to 0.4.4 by @dependabot[bot] in #60
• feat: support verified executable scratch fallback by @kazu-42 in #112
• Gate descriptor isolation before Codex process hardening by @kazu-42 in #115
• chore(deps): upgrade hmac and sha2 together by @kazu-42 in #113
• Make pinned Codex package probes hermetic by @kazu-42 in #116
• security: eliminate final pinned-executable pathname race by @kazu-42 in #117
• Document platform-owned descendant containment boundary by @kazu-42 in #118
• Add staged same-identity Codex reauthentication by @kazu-42 in #119
• feat: expose exact supervised resume by @kazu-42 in #120
• feat: project typed Codex usage exhaustion by @kazu-42 in #121
• docs: define supported Claude profile boundary by @kazu-42 in #122
• feat: add signed distribution pipeline by @kazu-42 in #123
• feat: seal Claude Linux adapter boundary by @kazu-42 in #124
• feat: add Claude Linux profile lifecycle by @kazu-42 in #125
• feat: expose guarded Codex failover by @kazu-42 in #126
• chore: prepare v0.1.0-alpha.5 release by @kazu-42 in #127
• ci: automate hypothesis-driven improvement snapshots by @kazu-42 in #131

New Contributors

• @dependabot[bot] made their first contribution in #81

Full Changelog: v0.1.0-alpha.4...v0.1.0-alpha.5