Release v0.10.0: Correctness, Safety & Operational Maturity · robot-accomplice/roboticus-rust

Highlights

Model Categorization (Phase 1): 10 task categories × 29 model profiles × 8 providers → category-aware routing with category_fit metascore dimension
Skill Authoring API: Create, validate, and publish Markdown instruction skills via POST /api/skills/author
Landlock & Job Object Confinement: Linux filesystem sandboxing (landlock) and Windows process isolation (Job Objects) for script execution
Typestate Sessions: Compile-time session lifecycle enforcement — Session<Created> → Session<Active> → Session<Closed>
Delegation Scoring Engine: score_agent_fit(), composite_fit_ratio(), and utility_margin_for_delegation() for principled decomposition decisions
TUI Client: Interactive terminal interface via roboticus tui with streaming responses and WebSocket transport
Codex CLI Plugin: Delegate coding tasks to OpenAI Codex CLI with structured output

Signal adapter: replaced std::sync::Mutex in async context with bounded tokio::sync::mpsc — eliminates runtime thread blocking
Signal adapter: added governor::RateLimiter (5 req/s default) to prevent signal-cli daemon DoS
Delivery queue: proper HTTP status code extraction for permanent vs transient error classification
Formatter: 3-allocation chain → single-pass clean_content() across all channel formatters

DedupTracker moved from LlmService (requiring write lock) to AppState (standard Mutex) — reduced lock contention
L0 context budget increased from 4,000 → 8,000 tokens
Codecov upload made best-effort (quality gates still enforced at 80% minimum + regression check)
Cross-platform CI: Windows HANDLE type migration for windows-sys 0.59+
Dependabot, Docker Compose, backup/restore runbook, observability guide