v0.6.0

[0.6.0] - 2026-09-27

Added

• Add scoped authority foundation(790d788)
• Connect scoped support workflow(d8d8416)
• policy: Add pinned authority manifests(a17eeb6)
• Export verifiable scope evidence(0ff3de0)
• ax: Correlate retained action outcomes(1a14acd)
• scope: Bind operator TLS trust roots(180e66f)
• scope: Govern GitHub staging workflow dispatch through scoped authority (#136)(2109af7)

Documentation

• Register scoped authority public page(513ab63)
• Explain uncertain agent writes(5477664)
• Link the Harborlight quickstart (#109)(bcb3b7e)

Fixed

• test: Stop timed-out package process groups(27b0d67)
• scope: Bind grants to provider credential(672c01b)
• mcp: List only served tools; name the failing field in validation errors (#135)(6589927)
• cli: Connect writes a working MCP config; presets stop teaching phantom syntax (#137)(9bf925a)
• sandbox: Probe Landlock for real and restrict the child, not the wrapper (#140)(08fcab9)
• test: Drain peer connections at shutdown (#89)(56126cf)

Miscellaneous

• license: Relicense the public core to Apache-2.0 with CC BY 4.0 documentation (#141)(551fa8c)

Testing

• scope: Qualify authority recovery failures(69c495f)
• scope: Qualify review failure boundaries(c935b68)
• Qualify scoped authority failure paths(350b7ea)
• evidence: Cover unsafe stopped exports(bef40f0)