v0.1.9

0.1.9 (2026-08-30)

Features

• cli: add explicit executable grants and user profile files (#41) (0526d11)
• sandbox: accept versioned JSON policies (#42) (915ffda)

Code Refactoring

• cli: assemble policy before finalization (#40) (88c0cd3)
• core: centralize trusted policy finalization (#39) (a730487)

v0.1.8

0.1.8 (2026-08-30)

Bug Fixes

• release: verify versions from Cargo metadata (#37) (ae31659)

v0.1.6

0.1.6 (2026-08-27)

Features

• allow Numbat collector access on one local-host port (#28) (07c951b)
• preserve configured Numbat hooks (#27) (ca08d6b)
• set up runtime control integrations (#30) (b80339f)

v0.1.5

0.1.5 (2026-08-23)

Bug Fixes

• allow read-only macOS runtime timezone data (#23) (488b3f8)

v0.1.4

0.1.4 (2026-08-23)

Bug Fixes

• preserve agent provider TLS trust (#18) (6b2daae)

v0.1.3

0.1.3 (2026-08-23)

Features

• allow exact Kontext socket access with --block-net (#16) (d56d78f)

Bug Fixes

• preserve foreground terminal controls (#14) (d961399)
• verify release tags without persisted credentials (#12) (5f3740a)

v0.1.2

0.1.2 (2026-08-23)

Bug Fixes

• keep standalone runs independent of Kontext (77587d3)
• publish releases to Homebrew tap (d5520b6)

v0.1.1

0.1.1 (2026-08-22)

Features

• add runtime control bridge for Kontext (c3cb049)
• data-driven agent profiles with explicit --profile selection (3bcfeab)
• data-driven agent profiles with explicit --profile selection (b49782e)
• wire Kontext through a runtime control bridge (bfaf083)

Bug Fixes

• address release-please updater review findings (0581929)
• harden embedded agent profiles (7d9e851)
• prepare formula for public distribution (7e88d30)
• support inherited workspace versions (db73f2d)
• support inherited workspace versions (502b034)

v0.1.0

Full Changelog: https://github.com/kontext-security/sandy/commits/v0.1.0