v0.3.0

Changed

• Single binary: doit-mcp and doit consolidated into a single doit MCP server binary. The legacy CLI (internal/cli/) has been removed — all functionality is now MCP tools.

Added

• MCP elicitation for policy decisions: When the policy engine escalates or hits a bypassable rule, doit presents an interactive dialog to the user with four options: Allow once, Allow always, Deny, Deny always. Replaces the old --retry flag mechanism.
• Two-phase rule promotion: "Always" choices trigger a follow-up elicitation proposing Starlark rules at narrow/moderate/broad generality levels. Users pick a rule to create or decline.
• L2 learned policy recording: "Allow always" and "Deny always" decisions are immediately recorded in the L2 policy store for future automatic matching.
• Admin MCP tools: doit_list_capabilities (with optional tier filter), doit_audit_verify (hash chain integrity check), doit_audit_tail (recent entries)
• Bypassable field on policy results — propagated from L1 Go rules and Starlark rules through to EvalResult

Removed

• Legacy CLI binary (cmd/doit/ old entry point)
• internal/cli/ package (subcommand handlers)
• --help-agent, --list, --audit, --policy CLI subcommands (replaced by MCP tools)

Dependencies

• mcp-go updated from v0.44.1 to v0.47.0 (elicitation support)