v0.27.0

Changelog

• e51f674 Post-merge hardening and cleanup for custom proxy registries (#408) (#422)
• 57671e1 Support fallback package managers in protection checks (#418)
• 92fd0ec ci: Add support for edge release (#420)
• 62e3ae5 docs(mdm): add JumpCloud deployment steps for macOS scripts (#413)
• 4563fc8 feat(acceptance): add real-binary acceptance suite with guarantee catalog and report (#423)
• e130296 feat(cloud): send endpoint check-in on empty sync (#412)
• b44cd62 feat(cooldown): explain install failures caused by withheld versions (#400)
• 4dff102 feat(mdm): add standalone macOS deployment scripts (#419)
• 0c7a8fc feat(proxy): support custom npm and PyPI registries (#408)
• 4c2f01f feat(sandbox): surface bubblewrap denials as sandbox violations (#397)
• 669e3f2 feat(setup): install shims and aliases under XDG directories (#406)
• 267e01a feat: add experimental Cargo/crates.io support (#421)
• cb27717 fix(mdm): trust safedep/tap pmg cask before brew operations (#425)
• e579637 fix: Avoid reading stale memory fd in seccomp notify handler (#404)
• 54f5d48 fix: Landlock sandbox enforcement order (#415)
• 26e5cd7 fix: Maintain parity between status info command (#414)
• b848f8b test(acceptance): expand malware-block coverage (incl. PyPI) and add protection controls (#424)
• 64d9f14 test(mdm): add E2E harness for multifile scripts and non-macOS guard (#426)