v1.0.0-rc.2

What's Changed

• Harden security pins and direct mount staging by @omkhar in #351
• Refresh pinned upstreams by @omkhar in #352
• ^F Add Antigravity fail-closed scaffold by @omkhar in #353
• Fix Colima staging cache mounts by @omkhar in #354
• Add Copilot release pin verifier by @omkhar in #355
• Keep pin hygiene green when Rust Docker tag lags by @omkhar in #357
• chore: bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group across 1 directory by @dependabot[bot] in #356
• Add host auth-state foundations by @omkhar in #358
• Harden Copilot release verification modes by @omkhar in #359
• Add Copilot auth policy metadata groundwork by @omkhar in #360
• ^F Add certified adapter PR shape override by @omkhar in #361
• Add GitHub Copilot Tier 1 adapter by @omkhar in #362
• Add 1.0 program: roadmap improvement tracks and implementation plan by @omkhar in #363
• Add support-tier docs and support-matrix field-parity check (E3) by @omkhar in #364
• Add markdown link and orphan CI check (E4) by @omkhar in #365
• Add OWASP Agentic Top-10 control mapping (A7) by @omkhar in #366
• Document the Rust/Go/shell language-boundary doctrine (D1) by @omkhar in #367
• Add artifact retention policy and drift check (B5) by @omkhar in #368
• Add mutation-score baseline gate (B3 core) by @omkhar in #369
• Add reviewed GitHub Actions allowlist (B4 core) by @omkhar in #370
• Centralize CI tool pins into reviewed policy (B4b) by @omkhar in #371
• Add scheduled mutation-score CI lane (B3b) by @omkhar in #372
• Document and enforce unsafe-code safety invariants (A4) by @omkhar in #373
• Add SLSA v1.0 Build-track gap analysis to the provenance doc (B1) by @omkhar in #374
• Stability contracts: unify the exit-code contract and document it (D8) by @omkhar in #375
• Add a standards watchlist (F3) by @omkhar in #376
• Public contract inventory + drift check (G1 part 1) by @omkhar in #377
• Add maintained architecture diagrams (E2) by @omkhar in #378
• Add Go fuzzing targets and a scheduled fuzz lane (A3) by @omkhar in #379
• Restructure README into tiered entry points (E1) by @omkhar in #380
• Add operator egress policy depth: [network] allowlist surface (A1) by @omkhar in #381
• ^F Treat an empty egress allowlist as deny-all (A1 follow-up) by @omkhar in #382
• ^F Add Rust cargo-fuzz targets for exec-guard classifiers (A3) by @omkhar in #383
• ^F Add exec-guard syscall-shim performance baselines (C5) by @omkhar in #384
• ^F Add CI/CD threat model (B9) by @omkhar in #385
• ^R CI efficiency and reliability program (B8) by @omkhar in #386
• ^f Support-bundle redaction core (G2, 1/3) by @omkhar in #388
• ^F Support-bundle collector + leak-proof + golden (G2, 2/3) by @omkhar in #389
• ^F workcell support-bundle command + audit hardening (G2, 3/3) by @omkhar in #390
• ^B Use snapshot-cloudflare.debian.org CDN mirror (origin fallback) to end mirror-halting CI by @omkhar in #392
• ^D Document injection-policy schema + doc/parser drift check (E5) by @omkhar in #391
• ^D Contributor runbook depth: adapter READMEs + worked examples (E7) by @omkhar in #387
• ^f C2 session-start latency benchmark harness (locally-validatable core) by @omkhar in #393
• ^R D4: extract host-detection into scripts/lib/launcher/host-detect.sh + launcher-contract.md by @omkhar in #394
• ^R D4: extract trusted host-command execution into scripts/lib/launcher/host-exec.sh by @omkhar in #395
• ^R D4: extract Go/Colima host-utility wrappers into scripts/lib/launcher/go-hostutil.sh by @omkhar in #396
• ^d D4: complete launcher-contract.md with required-tools/env/exit-codes/test-flags reference by @omkhar in #397
• ^R D3: migrate git-config-blocklist parity check from verify-invariants.sh to Go by @omkhar in #398
• ^R D3: migrate scripts/workcell hardening invariants from verify-invariants.sh to Go by @omkhar in #399
• ^R D3: migrate scripts/workcell config-safety checks from verify-invariants.sh to Go by @omkhar in #400
• ^R D3: migrate scripts/workcell runtime/gc invariants from verify-invariants.sh to Go by @omkhar in #401
• ^R D3: migrate scripts/workcell managed-profile staging invariants from verify-invariants.sh to Go by @omkhar in #402
• ^R D3: migrate scripts/workcell bootstrap egress-endpoint invariants from verify-invariants.sh to Go by @omkhar in #403
• ^R D3: migrate scripts/workcell bootstrap-audit-metadata invariants from verify-invariants.sh to Go by @omkhar in #404
• ^R D3: migrate scripts/workcell git-index/shadow function-block invariants to Go by @omkhar in #405
• ^R D3: migrate scripts/workcell publish-pr/shadow-mount invariants to Go by @omkhar in #406
• ^R D3: migrate scripts/workcell shadow-enumeration + egress-ip6tables invariants to Go by @omkhar in #407
• ^R D3: migrate home-seeding + provider-wrapper env-scrub invariants to Go (57 checks) by @omkhar in #408
• ^R D3: migrate copilot prefix-scrub + token-handoff invariants to Go (29 checks) by @omkhar in #409
• ^R D3: migrate copilot/docker-run token-handoff invariants to Go (25 checks) by @omkhar in #410
• ^R D3: migrate provider-launcher-authority invariants to Go (30 checks) by @omkhar in #411
• ^R D3: migrate copilot-policy provider-wrapper invariants to Go (22 checks) by @omkhar in #412
• ^R D3: migrate copilot unsafe-flag invariants to Go (31 checks, +present-in-any-file kind) by @omkhar in #413
• ^R D3: migrate copilot upstream-release-verify invariants to Go (24 checks) by @omkhar in #414
• ^R D3: migrate adapter-rule/guard-bash invariants to Go (18 checks, +count-at-least kind) by @omkhar in #415
• ^R D3: migrate inspect/assurance grep-loop invariants to Go (25 checks) by @omkhar in #416
• ^R D3: migrate validator writable-state isolation invariants to Go (23 checks) by @omkhar in #417
• ^R D3: migrate hostutil/entrypoint/colima-egress rg invariants to Go (21 checks) by @omkhar in #418
• ^R D3: migrate dockerfile-pin rg invariants to Go (30 checks) by @omkhar in #419
• ^R D3: migrate validator-env/dispatch loop invariants to Go (13 checks) by @omkhar in #420
• ^R D3: migrate nested caller×required validator-isolation invariants to Go (50 checks) by @omkhar in #421
• ^R D3: migrate fn-block/go-fn-block/git-env invariants to Go (8 checks, +go-function-block kind) by @omkhar in #422
• ^R D3: migrate 4 scattered simple-check clusters to Go (20 checks, 4 subcommands) by @omkhar in #423
• ^R D3: final simple-check sweep to Go (16 checks, 6 subcommands + orphan-helper cleanup) by @omkhar in #424
• ^R D3: add dir-exists/executable/fn-block-regex-absent kinds + migrate 3 checks to Go by @omkhar in #425
• ^R D3: migrate static jq -e adapter-settings invariants to Go (kindJSONExprEval, 4 checks) by @omkhar in #426
• ^d D3: refresh workcellhardening package doc to the current migration state by @omkhar in #427
• ^d Fix orphaned docs/session-startup-benchmarks.md (docs CI green) by @omkhar in #428
• ^r D3: backfill real-repo assertions for the early workcellhardening groups (tests only) by @omkhar in #429
• ^R D3: migrate host-gate/trusted-Docker rg-loop invariants to Go (61 checks, 3 subcommands) by @omkhar in #430
• ^R D3: migrate scenario/manifest filesystem checks to Go + drop orphaned regex helper by @omkhar in #431
• ^R D3: migrate the last static jq -e adapter-settings checks to Go (array/pipe/truthiness) by @omkhar in #432
• ^F C1 (1/4): apple-container local-VM contract + materialization/bootstrap by @omkhar in #434
• ^F C1 (2/5): apple-container audit-line helpers by @omkhar in #436
• ^F C1 (io): apple-container hardened filesystem I/O primitives by @omkhar in #437
• ^F C1 (recovery): apple-container session types + recovery/idempotency helpers by @omkhar in #439
• ^F C1 (record): persist bootstrap_id/image_ref on the session record by @omkhar in #440
• ^B C1 (audit-newline): heal appendAuditLine append boundary (prevents torn-write dead-end) by @omkhar in #441
• ^b C1 (audit-read-heal): recover a write-only audit log on the read path by @omkhar in #442
• ^R C1 (session-helpers): extract apple-container session render/compare/validate helpers by @omkhar in #443
• ^F C1: apple-container session lifecycle (StartSession/FinishSession) by @omkhar in #435
• ^b C1 (fstest-fs): apple-container filesystem-hardening tests by @omkhar in #444
• ^b C1 (fstest-lifecycle-a): apple-container input-trust + path-canonicalization tests by @omkhar in #445
• ^b C1 (fstest-lifecycle-b): apple-container recovery/idempotency/conflict tests by @omkhar in #446
• ^D Operator boundary-incident response runbook (GAP-2) by @omkhar in #448
• ^F C1 (conformance): apple-container self-contained conformance harness by @omkhar in #447
• ^b C1 (conformance-tests): apple-container conformance harness tests by @omkhar in #450
• ^F C1 (eval): apple-container evaluation, go/no-go, live probe + macOS-26 guard by @omkhar in #451
• ^F Verified consumer install path (B10 / GAP-1): cosign fail-closed release verify by @omkhar in #449
• .r D4: extract launcher egress-endpoint assembly into scripts/lib/launcher/ by @omkhar in #452
• .r D6: extract GitHub Actions workflow format from pinnedinputs.go by @omkhar in #453
• .r D5: extract git-policy module from rust lib.rs (ABI-preserved) by @omkhar in #454
• .t D7: property-based session-lifecycle tests (testing/quick, guards C1 invariants) by @omkhar in #455
• ^F Add %q audit-line decoder with dup-key rejection (internal/ocsf) by @omkhar in #457
• ^F Add per-writer encoding selection to the audit-line decoder (internal/ocsf) by @omkhar in #459
• ^F Add known-audit-field allowlist for safe OCSF unmapped keys by @omkhar in #460
• ^F F1 (1/2): OCSF session-event export (workcell session export --format ocsf) by @omkhar in #461
• ^F A2: deny repo-defined MCP configs by default in strict mode (dated ack to opt in) by @omkhar in #458
• ^F F1 (2/2): OCSF per-audit-record events + free-form redaction by @omkhar in #462
• ^D Document the OCSF-mapped session export in the evidence baseline (F1 follow-up) by @omkhar in #463
• ^F A6: capture the runtime hardening posture as a reviewed artifact + drift-detecting conformance check by @omkhar in #465
• ^F C3 (increment 1): session list --parallel — parallel-session topology inventory by @omkhar in #469
• ^F A5 (1/3): ocsf strict audit-line decode primitives (bare-token + dup-key reject, decoded session_id claim) by @omkhar in #470
• ^F G3: install-lifecycle day-two evidence — offline install-release e2e, upgrade/rollback/gc scenario, config compat-read by @omkhar in #468
• ^F C3 (2/2): container-level non-interference proof for parallel isolated sessions by @omkhar in #473
• ^D D6 status: record PARTIAL with evidence for the remaining split lane by @omkhar in #476
• ^F D3 ratify: backfill RealRepo static-file assertions + honest D3-status note by @omkhar in #475
• ^D G4/B6: draft 1.0-readiness review + B6 disposition options (maintainer decision) by @omkhar in #477
• A5 PR-A: keystore — per-host signing key management for audit seals by @omkhar in #478
• ^F A5 (2/3): host-side audit-seal library — hash-chain verify + per-host signing by @omkhar in #471
• A5 PR-A2: keystore hardening test matrix (test-only) by @omkhar in #479
• ^F A5 (3/3): workcell session verify + session-stop signing hook + trust-model doc by @omkhar in #472
• A5 PR-C2: audit-lock wait-budget slow-holder test (test-only) by @omkhar in #480
• Gate: amend 1.0 criteria 2/6 (defer B7 audit + automated B6 runner) + record A5-merged by @omkhar in #481
• D6: extract Node pinned-input validators by @omkhar in #482
• chore: bump actions/attest from 4.1.0 to 4.1.1 in the github-actions group by @dependabot[bot] in #438
• D6: extract Docker pinned-input validators by @omkhar in #483
• Record criterion 6/7 amendments: defer B2 and E6 post-1.0 by @omkhar in #484
• Split regex checks onto their own field in workcellhardening (closes 10 CodeQL alerts) by @omkhar in #485
• Add workcell --version (changelog-derived, rc-suffix aware) by @omkhar in #486
• Preserve file modes in upstream-pins refresh rewrites by @omkhar in #487
• Refactor Codex adapter subcommand gate to deny-by-default allowlist by @omkhar in #489
• Bump upstream pins to latest reviewed (codex 0.144.1, claude 2.1.207, copilot 1.0.70, gemini 0.50.0, go 1.26.5, rust 1.97.0) by @omkhar in #490
• Backfill CHANGELOG for v1.0.0-rc.1 (v0.12–v0.15 reconstruction + rc gate) by @omkhar in #491
• Fix the release arm64 Copilot probe: single-platform image so --load works (v1.0.0-rc.2) by @omkhar in #492

Full Changelog: v0.11.2...v1.0.0-rc.2