v0.10.0

What's Changed

• chore(deps): nightly rollup 2026-09-24 by @bonk-ai[bot] in #214
• docs: re-point 476 citations, refresh counts, and list the 0.9.0 protocol fields by @bonk-ai[bot] in #215
• fix(cli): a closed stdout or stderr never panics the CLI or changes its outcome (#216) by @laithalsaadoon in #217
• fix(core): cold-start budget for the agent version probe; the live suite survives a raising section by @laithalsaadoon in #218
• feat: Sandbox.detach() hands a launched VM to another process without a leak warning by @laithalsaadoon in #230
• feat(example): SDK-only VM lifecycle, published wheels, and a live end-to-end run by @laithalsaadoon in #229
• chore(trace): trace requirements from both specs across every crate, with stated layer waivers by @laithalsaadoon in #231
• feat(core,bindings): wrap_dockerfile and BaseImage.from_dockerfile for task Dockerfiles (#220) by @laithalsaadoon in #232
• feat(protocol): exec names its user, group and shell, and may inherit the image ENV (#224, #225, #226) by @laithalsaadoon in #235
• feat: provision_agentd in core and every binding, with verified cache and aarch64 checks (#219) by @laithalsaadoon in #234
• feat: Session.run_to_completion and ExecResult.posix_exit_code / notes (#222) by @laithalsaadoon in #233
• feat(bind): egress posture on the launched session and a request-side egress_posture_for (#227) by @laithalsaadoon in #236
• feat(bind): SizeClass.from_request and preflight in core and both bindings (#223) by @laithalsaadoon in #238
• feat(core,bindings): Sandbox.ensure_image, content-addressed build-or-reuse with a build context and S3 upload (#221) by @laithalsaadoon in #237
• docs(embedding): the provider shape a harness environment builds over the bindings by @laithalsaadoon in #239
• release: 0.10.0 by @laithalsaadoon in #240

Full Changelog: v0.9.0...v0.10.0