v1.2.0

What's Changed

• chore(deps): nightly rollup 2026-10-16 by @bonk-ai[bot] in #666
• fix(tools): ask git about a symlink without its directory form in agents:check by @bonk-ai[bot] in #667
• docs: name exec --poweroff-on-exit and re-point the Maturin pin test by @bonk-ai[bot] in #668
• chore(deps): Rust 1.99.1 by @bonk-ai[bot] in #669
• fix: release sandbox when image ensure is canceled by @laithalsaadoon in #684
• fix: correct preflight IAM action hint by @laithalsaadoon in #679
• test: stabilize the mutation budget fixture by @laithalsaadoon in #680
• refactor: centralize the shared default daemon port by @laithalsaadoon in #693
• build: pin the optional formal verifier environment by @laithalsaadoon in #682
• feat: add authenticated default-user discovery by @laithalsaadoon in #687
• Measure ready hooks beyond five minutes in live conformance by @laithalsaadoon in #691
• Verify the Box example on native ARM64 Linux by @laithalsaadoon in #681
• fix: isolate concurrent daemon cache installs by @laithalsaadoon in #683
• fix: use the shared daemon port throughout conformance by @laithalsaadoon in #699
• Move durable run records and history into shared client layers by @laithalsaadoon in #685
• test: share offline control-plane parity fixtures by @laithalsaadoon in #688
• feat: preserve the final Dockerfile user when wrapping by @laithalsaadoon in #695
• test: prove shared parity cases against the merge base by @laithalsaadoon in #697
• fix: diagnose null-message access denials without blaming the region by @laithalsaadoon in #690
• feat: sweep images and VMs by prefix with keep lists by @laithalsaadoon in #689
• fix: share cached credential providers across clients by @laithalsaadoon in #686
• fix(python): drain async wake callbacks before shutdown by @laithalsaadoon in #701
• Expose configurable throttle retries and launch timing by @laithalsaadoon in #694
• feat(parity): cover strings, zero, absent and TypeScript defaults by @laithalsaadoon in #696
• Extend parity inventory to public inputs and types by @laithalsaadoon in #698
• Retry throttled conformance observer snapshots by @laithalsaadoon in #702
• Add scoped hosted recovery for interrupted live runs by @laithalsaadoon in #703
• Fix recovery repository metadata endpoint by @laithalsaadoon in #704
• Bind recovery provenance to direct job logs by @laithalsaadoon in #705
• Retry throttled recovery observations within the shared deadline by @laithalsaadoon in #706
• fix: complete approved image recovery before log dependency checks by @laithalsaadoon in #707
• ci: collect read-only recovery observations by @laithalsaadoon in #709
• fix: bound terminated history in recovery observations by @laithalsaadoon in #710
• fix: retry shutdown observation when a procfs row vanishes by @laithalsaadoon in #713
• fix: refresh native credentials throughout live verification by @laithalsaadoon in #708
• fix(conformance): repair the four live-suite failures from run 39088836602 by @laithalsaadoon in #714
• chore: prepare 1.2.0 release by @laithalsaadoon in #716

Full Changelog: v1.1.1...v1.2.0