v0.27.0

What's Changed

• ci: add scheduled Cargo audit workflow (#622) by @Humerous in #640
• fix(brain): scope planner examples by distro by @dannyward630 in #656
• test(e2e): accept UbuntuListFlatpaks in story 47 on Debian-family hosts by @vladimirrott in #661
• fix(release): require crates.io publication before np by @Humerous in #660
• fix(release): make failed version bumps atomic by @dannyward630 in #637
• fix(brain): scope query tools by distro by @dannyward630 in #658
• fix(release): label and deduplicate post-release checklists by @dannyward630 in #635
• fix(cli): use the daemon distro for remote planning and MCP discovery by @QinXi-ai in #626
• fix(brain): keep other-host prompts within the action schema by @QinXi-ai in #684
• fix(security): key request_hash with an HMAC under the audit key (chain_version 4) by @Georgefifth in #627
• docs: render every published figure from its source by @vladimirrott in #685
• fix(audit): resolve checkpoint and MCP stores consistently by @dannyward630 in #636
• chore(ci): bound workflow job runtimes by @dannyward630 in #662
• fix(history): send the exact --since cutoff instead of whole hours by @anyingiit in #639
• README says the CLI's approval gate is sysknife approve; the CLI approves in-process after its own prompt by @YuuGR1337 in #655
• chore(release): v0.27.0 by @vladimirrott in #686

New Contributors

• @anyingiit made their first contribution in #639
• @YuuGR1337 made their first contribution in #655

Full Changelog: v0.26.1...v0.27.0