What's Changed
- fix(mcp): enforce enterprise managed allowlists by @samartomar in #453
- feat: add repo-scoped AI token tooling by @samartomar in #454
- fix: expose graph MCP to Codex by @samartomar in #455
- Fix Token Savior MCP runtime callability by @samartomar in #456
- fix: make baseline vet-once reproducible by @samartomar in #457
- perf(trust): make many-finding scans near-linear by @samartomar in #458
- fix(mcp): preserve concurrent configuration edits by @samartomar in #459
- fix(mcp): complete managed policy lifecycle by @samartomar in #460
- feat(policy): add standalone projection command by @samartomar in #461
- fix(mcp): normalize exact resolver pin semantics by @samartomar in #462
- fix(workspace): accept populated child graphs by @samartomar in #463
- fix(trust): restrict GitHub fetch redirects by @samartomar in #464
- fix(trust): preserve external input integrity by @samartomar in #468
- feat(baseline): report detector timing by @samartomar in #469
- fix(ecc): align Codex preflight with pinned defaults by @samartomar in #470
- docs: clarify Comby optionality on Windows by @samartomar in #471
- docs: clarify release verification evidence by @samartomar in #472
- test: remove no-op module URL replacement by @samartomar in #473
- chore(release): prepare v2.11.0 by @samartomar in #475
Full Changelog: v2.10.0...v2.11.0
Contributors
samartomar