RunSeal 0.1.2

RunSeal 0.1.2

Changes

• Adds experimental macOS and Linux portable sandbox execution for read-only and workspace-write with network.disabled.
• Keeps macOS/Linux workspace-contained and portable network.proxy unsupported until stronger enforcement is implemented.
• Adds feature_statuses to capability output so clients can distinguish supported, experimental, and unsupported feature state.
• Expands portable conformance coverage for runtime roots, cleanup, write boundaries, path escapes, and direct egress denial.

Release Packaging

• Native archives are published for Windows, macOS, and Linux from the release workflow.
• Each archive has a matching .sha256 checksum file.
• The release workflow can be rerun for an existing tag and will replace stale assets.

Validation

• Windows: cargo fmt --check, cargo clippy --tests -- -D warnings, cargo test -q with 287 tests passing, and release artifact build.
• Linux/WSL: runseal --version reports 0.1.2, filesystem conformance has 16 tests passing, and release checksum was verified.
• macOS: runseal --version reports 0.1.2, filesystem conformance has 16 tests passing, and release checksum was verified.
• GitHub Actions packaging run succeeded for the current release assets.