v0.215.0

[0.215.0] - 2026-07-25

Features

• (engine) Add the local working-copy archetypes
• (vcs) Re-research git's local working-copy surface under the facets
• (aws) Restructure secretsmanager from glob to researched sub-subs
• (gcloud) Restructure secrets from a glob into researched sub-subs
• (aws) Restructure kms from a glob into researched sub-subs
• (aws) Research iam's read-verb glob flags
• (aws) Research the s3api, logs and cloudtrail read-verb glob flags
• (aws) Research the ec2, rds, lambda and ecs read-verb glob flags
• (aws) Research the ssm, dynamodb, cloudformation, sns and sqs glob flags
• (engine) Recognize loopback network locations
• (registry) Gate a flag on its value naming this machine
• (engine) A local endpoint re-classifies a sub as its local archetype
• (aws) Classify dynamodb's item surface for local development
• (engine) Report WHICH facet refused a command
• (engine) Detect confusable archetypes mechanically

Bug Fixes

• (registry) Enforce the flag allowlist on profiled subcommands
• (registry) Require a profiled sub to declare its flag surface
• (registry) Enforce a researched flag list on first_arg glob families
• (aws) Dynamodb scan is a data-export, not a bulk-object-read
• (registry) A flag past -- is a positional, not an endpoint
• (registry) Decide the loopback destroy rule by operation, not by name
• (engine) Derive the fail-closed sentinel from declared per-axis hazards
• (engine) The sentinel's operation was one an everyday level admits

Refactor

• (engine) Compose the loopback effect instead of swapping archetypes

Documentation

• (repo) Record the glob-family flag migration and its remaining set
• (repo) Record the loopback feature's remaining work
• (repo) Correct the install-clause claim in the unverified-axes note

Testing

• (engine) Property-test the facet enumeration and the loopback host check