v1.0.0

1.0.0 (2026-08-04)

⚠ BREAKING CHANGES

• retire legacy managed sessions (#440)

Features

• compute the risk annotation in the decision path and upload it (#428) (2eb0fc9)
• config: negotiate endpoint-config v2 and honour the guardrail switch (#433) (d1cbf28)
• doctor: identify builds by source revision, not version string (#435) (d106002)
• doctor: report core setup health (#441) (e4711d8)
• guard: run the guardrail LLM in the managed daemon too (#436) (fa23eb6)
• observe-mode bash risk classifier (SVM + local guardrail LLM) (#414) (f1a1904)
• retire legacy managed sessions (#440) (f5be064)
• setup: make the local risk model an optional setup step (#444) (938bd18)
• single guardrail LLM (stock Qwen3-0.6B, V2 prompt) replacing the JSON judge (#423) (f7be605)

Bug Fixes

• managed: survive a mode the running build does not implement (#434) (3f4e33a)