Last beta of this one, we promise

What's Changed

• Add Kani harnesses for command interpolation (4.2.3) by @leynos in #564
• Pass Rustdoc flags to Cargo doctests (#625) by @leynos in #642
• Move Linux CI to Ubicloud and Windows/macOS to GitHub-hosted runners by @leynos in #664
• Give the instrumented lanes a cold-build cargo watchdog budget by @leynos in #675
• Align Dependabot coverage and add the dev-fast build fragment by @leynos in #560
• Define structured-command shell selection (#638) by @leynos in #653
• Retire the cargo-orthohelp source-build exception by @leynos in #678
• Retire the last source-build exception by @leynos in #681
• Repin generate-coverage so a pull request stops moving the baseline by @leynos in #683
• Repin the mutation caller past two failures it could not report by @leynos in #685
• Terminate Ninja options before build targets (#645) by @leynos in #662
• Instrument release-admission metrics (#627) by @leynos in #641
• Fold the Windows native-recipe smoke job into the gate job by @leynos in #690
• Measure the Windows cost of the isolated-Cargo-build tests by @leynos in #687
• Run the Windows lints and tests as concurrent jobs (#691) by @leynos in #692
• Prevent project configuration from widening trusted fetch policy (#644) by @leynos in #663
• Remove full NetsukeManifest AST debug logs (#657) by @leynos in #661
• Isolate CodeScene PR coverage gate (#643) by @leynos in #658
• Revalidate fetch redirects against network policy (#647) by @leynos in #667
• Bound stdlib file filters and define a safe symlink/file-type policy (#648) by @leynos in #669
• Assert the timeout ordering, and record the tier we have not set by @leynos in #688
• Give the CodeScene gate the parent commit it compares against by @leynos in #709
• Take humantime's unit table whole by @leynos in #710
• Guard the trusted coverage steps against the wrong interpreter by @leynos in #707
• Call mdtablefix and markdownlint-cli2 directly from the Makefile by @leynos in #706
• Port humantime's fractional arithmetic, not an approximation of it by @leynos in #711
• Remove rendered manifest values from verbose logging (#649) by @leynos in #668
• Restore MSI upgrades from beta releases (#656) by @leynos in #660
• Set a nextest global-timeout in the profile CI selects (#689) by @leynos in #717
• Bound Ninja status-line buffering while preserving streamed output (#650) by @leynos in #713
• Adopt typos-config-builder gate for spelling by @leynos in #726
• Read durations as humantime reads them, over all seventy-one inputs by @leynos in #725
• Add pinned Interrogate docstring coverage gate (#676) by @leynos in #680
• docs: Roadmap structured execution and manifest composition by @leynos in #695
• Require explicit recursive workspace lookup (#646) by @leynos in #672
• Add manifest evaluation resource budgets (#651) by @leynos in #670
• Keeps pull-request coverage local by @leynos in #724
• Compare the timeout tiers exactly, not approximately (#727) by @leynos in #729
• Normalize ExecPlan status fields to a closed vocabulary (#586) by @leynos in #722
• Track reviewed Ninja-boundary ExecPlan refinements (#628) by @leynos in #723
• Store multi-output build edges once (#652) by @leynos in #714
• Forward NEXTEST_TEST_JOBS from the dev-test target (#671) by @leynos in #721
• Add manifest environment access policy (#666) by @leynos in #716
• Curate the Go tool directory on the Makefile PATH (#698) by @leynos in #701
• Type the redirect target at the transport boundary (#705) by @leynos in #735
• Bump ureq from 2.12.1 to 3.4.0 by @dependabot[bot] in #438
• Add property tests for CLI merge invariants (#317) by @leynos in #368
• Bump serde-saphyr from 0.0.6 to 1.2.0 by @dependabot[bot] in #450
• Bump the github-actions group across 1 directory with 19 updates by @dependabot[bot] in #731
• Complete local HTTP fixture responses with a write-side shutdown (#743) by @leynos in #749
• Record the deferred split-build-dir harness trim (#693) by @leynos in #736
• Size the coverage tiers for two watchdog windows and the report phase (#715) by @leynos in #742
• Validate the Windows final component through a same-handle reparse-point open (#703) by @leynos in #739
• Close the inner-attribute bypass of the environment-access policy (#694) by @leynos in #744
• Reuse nested Cargo build artefacts (#732) by @leynos in #752
• Pin the Markdown linter to a commit, and restore the baseline ignore by @leynos in #734
• Drop the deprecated installer-checksum input by @leynos in #758
• Widen two CodeScene uploader contract clauses by @leynos in #759
• Make the build standard the default by @leynos in #733
• Raise MiniJinja baseline to 2.24.0 (#719) by @leynos in #750
• Preserve script shell variables (#737) by @leynos in #753
• Reconcile roadmap 4.2.3 with ExecPlan completion evidence (#738) by @leynos in #755
• Record what netsuke's suite does under Cranelift by @leynos in #762
• Serialize parameterized child-Cargo tests through a case-matching filter (#732) by @buzzybee-df12 in #757
• Record ADR-038: runtime annotation introspection unsupported in workflow contracts (#730) by @leynos in #763
• Read the pull-request lane as a closure over calls by @leynos in #767
• Document the command placeholder contract in the README (4.4.1) by @leynos in #699
• Skip the duplicate Windows smoke on release dry runs by @leynos in #771
• Keep the CodeScene token out of every publisher env by @leynos in #773
• Import the revised Whitaker user's guide by @leynos in #745
• Add the clock provider seam to the stdlib time module (7.1.1) by @leynos in #696
• Propose progressive orchestration RFCs and implementation roadmap by @leynos in #741
• Clarify property-testing RFC contracts (10.1.2–10.3.4) by @leynos in #665
• Run Dependabot daily with grouped minor and patch updates by @leynos in #776
• Bump taiki-e/install-action from 2.87.12 to 2.87.15 in the github-actions group across 1 directory by @dependabot[bot] in #788
• Bump leynos/shared-actions/.github/workflows/mutation-cargo.yml from a5765019912a8ab6882b12db049c7cde635f3a85 to 438ad8a99a3580e753189c47391a1652c5f46ed4 by @dependabot[bot] in #791
• Bump leynos/shared-actions/.github/actions/stage-release-artefacts from a5765019912a8ab6882b12db049c7cde635f3a85 to 438ad8a99a3580e753189c47391a1652c5f46ed4 by @dependabot[bot] in #790
• Install the pinned mold in the coverage publisher by @leynos in #793
• Report each Linux release binary's glibc floor by @leynos in #775
• Run the CodeScene publisher in the codescene environment by @leynos in #801
• Guard every JSON diagnostic cause against source-excerpt leaks by @buzzybee-df12 in #754
• Propose hexagonal hardening, architecture checks, and a gated Paralegal experiment by @leynos in #747
• RFC 0029: first-class host facts with explicit collection by @leynos in #802
• Let a fork's pull request reach a runner it can have by @leynos in #728
• Set v0.1.0-beta4 release version and status by @leynos in #804

New Contributors

• @buzzybee-df12 made their first contribution in #757

Full Changelog: v0.1.0-beta3...v0.1.0-beta4