v0.10.6

What's Changed

• Fix upstream refresh and workflow gates by @omkhar in #170
• chore: bump github/codeql-action from 4.35.1 to 4.35.2 in the github-actions group across 1 directory by @dependabot[bot] in #169
• Fix publish-pr signed range enforcement by @omkhar in #171
• Refresh pinned upstreams by @omkhar in #172
• Refresh pinned upstreams by @omkhar in #174
• Hash-pin zizmor workflow install by @omkhar in #175
• Record Phase 10-12 roadmap gates by @omkhar in #176
• Fix provider-bump check status capture in update-upstream-pins.sh by @omkhar in #177
• Gate release.yml preflight on main checks being green by @omkhar in #178
• Add timeout-minutes to every workflow job by @omkhar in #179
• Bound HTTP timeout, request context, and response body in provider_bumps fetches by @omkhar in #180
• Use cmd.Output() not CombinedOutput() for gh api ruleset detail by @omkhar in #181
• Centralize sanitized-entrypoint preamble across 10 host-side scripts by @omkhar in #182
• Modernize 58 sort.Strings call sites to slices.Sort by @omkhar in #183
• Fix correctness cluster in internal/hostutil/launcher.go (6 bug fixes) by @omkhar in #184
• Fix small-bug cluster: scenarios, metadatautil, scripts/workcell trap, mutation runner by @omkhar in #185
• Install full validator toolchain via install-dev-tools.sh; align release.yml zizmor to 1.24.1 by @omkhar in #187
• Rename cmd/workcell-treecompare to cmd/workcell-tree-compare by @omkhar in #189
• Link closed-finding evidence from SECURITY.md by @omkhar in #188
• Add control-plane lockstep invariant under verify/invariants/ by @omkhar in #190
• Introduce internal/providerid constants and migrate 71 raw-string sites by @omkhar in #191
• Docs consistency pass: man, README, codex adapter README, CONTRIBUTING, dead markdownlint rule, auth unset by @omkhar in #186
• Small CI/CD + 🔵 cleanup cluster: ghcr login, cp -RP, map sort, EIO, max-filesize, pin-hygiene comment by @omkhar in #193
• Extract internal/tomlsubset canonical parser and dedupe stripComment across 5 packages by @omkhar in #192
• Centralize per-provider tables in internal/adapters/{p}/ by @omkhar in #194
• Delete tests and doc.go for dormant internal/policybundle (1 of 2 deletion PRs) by @omkhar in #198
• Add dated --ack-breakglass=YYYY-MM-DD and --ack-arbitrary-command=YYYY-MM-DD forms by @omkhar in #195
• Make release attestations fail-closed with WORKCELL_RELEASE_NO_ATTEST opt-out by @omkhar in #196
• Move forbidden host-path enumeration into policy/forbidden-host-paths.toml by @omkhar in #197
• Shrink dormant internal/policybundle/policy_bundle.go to stub vars + PolicySource (1 of 2) by @omkhar in #199
• Tidy mutation runner with goCmd helper, rename resolvePathLikePython, drop Python-mirror comments by @omkhar in #200
• Extract GitHub-release helpers into internal/host/release (1 of hostutil split series) by @omkhar in #201
• Delete dormant internal/policybundle (final step of D6) by @omkhar in #202
• Extract support-matrix into internal/host/supportmatrix (2 of hostutil split series) by @omkhar in #203
• Extract sessions package into internal/host/sessions (3 of hostutil split series) by @omkhar in #204
• ^R Extract Colima + profile-lock cluster into internal/host/launcher by @omkhar in #205
• ^R Extract host-state/mounts/audit cluster into internal/host/hoststate by @omkhar in #206
• ^R Finish hostutil split: move remaining helpers into internal/host/launcher, delete internal/hostutil by @omkhar in #207
• ^R Extract workflow validators into internal/metadatautil/workflows by @omkhar in #208
• ^R Extract hosted-controls policy helpers into internal/metadatautil/hostedcontrols by @omkhar in #209
• ^R Move VerifyGitHubHostedControls into internal/metadatautil/hostedcontrols by @omkhar in #210
• ^R Extract CheckPinnedInputs into internal/metadatautil/pinnedinputs by @omkhar in #211
• ^A Validate AppArmor/SELinux in daemon and post-launch HostConfig.SecurityOpt by @omkhar in #212
• ^R Collapse cmd/workcell-hostutil launcher switch into a registry table by @omkhar in #213
• ^R Convert cmd/workcell-metadatautil dispatch to a registry pattern by @omkhar in #214
• ^R Move install-deps mock binaries out of verify-invariants.sh into harnesses/ by @omkhar in #215
• ^R Bootstrap internal/sessionctl: move session_usage help text to Go by @omkhar in #216
• ^R Move session_timeline_main into internal/sessionctl/TimelineMain by @omkhar in #219
• ^R Move process/colima harness bodies into verify/invariants/harnesses/process-colima/ by @omkhar in #220
• ^R Move git-probe heredocs + gemini-auth-selection harness into verify/invariants/harnesses/ by @omkhar in #221
• ^R Translate session_logs_main into internal/sessionctl/LogsMain by @omkhar in #222
• ^R Extend internal/tomlsubset with shared tokenizer and AST by @omkhar in #223
• ^R Extract auth_usage and policy_usage heredocs into internal/authpolicy by @omkhar in #224
• ^R Extract publish_pr_usage heredoc into internal/publishpr by @omkhar in #225
• ^R Migrate authpolicy and authresolve to shared tomlsubset by @omkhar in #228
• ^R Translate auth_main into internal/authpolicy/AuthMain by @omkhar in #230
• ^R Translate session_attach_main into internal/sessionctl/AttachMain by @omkhar in #227
• ^R Translate publish_pr_main validators into internal/publishpr (24.2a) by @omkhar in #231
• ^R Translate policy_main into internal/authpolicy/PolicyMain by @omkhar in #229
• ^R Translate colima helpers into internal/host/launcher by @omkhar in #226
• ^R Migrate injection to shared tomlsubset (closes Section F) by @omkhar in #234
• ^R Translate profile path helpers into Go by @omkhar in #235
• ^R Translate prepare_injection_bundle/direct_mounts into internal/injection by @omkhar in #236
• ^R Translate docker client + process helpers into Go by @omkhar in #237
• ^R Translate session_stop_main into internal/sessionctl/StopMain by @omkhar in #238
• ^R Translate session_send_main into internal/sessionctl/SendMain by @omkhar in #232
• ^R Wire publish_pr_main shim through publishpr.PublishPRMain (24.2b) by @omkhar in #233
• ^R Translate session_delete_main into internal/sessionctl/DeleteMain (22.6) by @omkhar in #239
• ^R Translate session_monitor + session_main dispatcher (22.7) by @omkhar in #240
• ^R Collapse cmd binaries: 7 thin cmds into 3 umbrellas (26) by @omkhar in #241
• ^B Fix sethify blockers + cliexit foundation (fix-1a) by @omkhar in #242
• ^R Sessionctl dispatch rename + shim dedup (fix-1b) by @omkhar in #243
• ^R Quality cleanup + pathutil/stateroot extraction (fix-2) by @omkhar in #244
• ^R Extract internal/shellproto for bash↔Go KEY=VALUE protocol (fix-3) by @omkhar in #245
• ^R Cmd docs + naming polish (fix-4) by @omkhar in #246
• ^B Sethify round-2 critical: red + near-red + cliexit completion (fix-5) by @omkhar in #247
• ^R Sethify round-2 architecture closures (fix-6) by @omkhar in #248
• ^R Sethify round-2 docs + polish + Q4 (fix-7) by @omkhar in #249
• ^B Sethify round-3 critical follow-up (fix-8) by @omkhar in #250
• ^R Sethify residual polish (fix-9) by @omkhar in #251
• Sec-r2-1: reject intermediate-symlink traversal in direct mount sources (fix-10) by @omkhar in #252
• ^R Promote *-cli and *-usage launcher entries to top-level workcell-hostutil subcommands (fix-11) by @omkhar in #253
• ^R Rename workcell-metadatautil → workcell-citools (fix-12) by @omkhar in #254
• ^R Sethify final cleanup: rename tail + symlink helper unification (fix-13) by @omkhar in #255
• chore: bump github/codeql-action from 4.35.2 to 4.35.3 in the github-actions group by @dependabot[bot] in #217
• chore: bump golang.org/x/sys from 0.43.0 to 0.44.0 in the go-modules group by @dependabot[bot] in #218
• Add Go fuzz tests for parser/security boundaries (closes #10) by @omkhar in #256
• Upstream refresh: Go 1.26.3 + Debian snapshot + raise npm JSON cap (closes #168) by @omkhar in #257
• Upstream refresh: daily cron + generated-at timestamp by @omkhar in #258
• Fix publish-pr and CLI/session review feedback by @omkhar in #259
• Fix validation and bootstrap review feedback by @omkhar in #260
• Fix residual monthly review feedback by @omkhar in #261
• Release v0.10.6 by @omkhar in #262

Full Changelog: v0.10.5...v0.10.6