v0.2.1

Changelog

• 6500469 Harden prod edge cases: trust-gate run, cap slugs, resolve root from subdirs, flag dangling pointers
• 82b80d8 codex driver: re-add .agents to sandbox writable roots
• 39abd1e init: ignore ephemeral .agents artifacts (tmp/, active); steer agents off in-repo caches