v0.11.0

Added

• Added ask_fallback: native for delegating unresolved asks to an interactive
  runtime's native permission flow. Claude Code can use it with Auto Mode;
  interactive Codex accepts it as its native default behavior, while headless
  Codex resolves it to block and records the configured and effective modes.

Changed

• nah run claude now allows Claude Code Auto Mode flags and classifies those
  launches as guarded agent execution. Permission and hook bypass modes remain
  rejected.
• Codex apply_patch deletions now follow the filesystem_delete policy, so
  project-local deletes use the same default behavior as rm through Bash.
• Simplified the documentation navigation by removing the team and unattended
  guides, promoting How it works and Threat model, consolidating content-pattern
  configuration under Safety lists, and trimming the optional LLM reference.

Fixed

• sensitive_paths_default: block now escalates built-in ask-sensitive paths
  and basenames even when no explicit sensitive_paths entries are configured.