v0.224.0

[0.224.0] - 2026-08-13

Features

• (pathgate) Gate ungated output-flag writes with operation-aware roles
• (pathgate) Sub-scoped gates, and two guards that found live holes
• (git) Vet the diff display keys for git -c
• (registry) Sub-scoped stdout claims, so grep $(git diff --name-only) works
• (cargo) Accept the rustup toolchain selector (cargo +nightly test)

Bug Fixes

• (allowlist) A home grant covers both spellings of the same file
• (registry) A sub-scoped stdout claim follows every trusted spelling of its command
• (git) Gate git diff's positionals — it was an ungated credential reader

Documentation

• Name the command-mode concept and record the output-flag burn-down
• Regenerate for the cargo toolchain selector examples

Testing

• (registry) Make the path-named-flag guard compile, and record the 142 rows it was hiding
• (pathgate) Cap the undeclared-valued-flag backlog a positional gate creates