v0.2.0 - Verification Engine Batch

letitloop 0.2.0 - the verification-engine batch

13 issues implemented in one batch: sandboxing, resilience, observability, DAG validation, and full core modularization. 1,403 tests passing (up from 1,221), ruff clean, CI green on Python 3.11/3.12.

Highlights

• Docker sandbox adapter (#7) and local LLM tool-calling adapter (#10) - run contracts in containers or fully offline via Ollama/vLLM
• Process-tree orphan guard (#16) - Windows Job Objects + POSIX process groups; grandchildren die with their parents
• Worktree sandboxing (#15) - every attempt in an ephemeral git worktree; merge on PASS, prune on FAIL
• DAG cycle detection (#17) - ASCII cycle traces, enforced at plan creation, dispatch, AND resume
• Webhooks + SSE (#18) - HMAC-signed dispatch, lil serve, 7 lifecycle events
• Prometheus/OTel exporter (#8) - histograms, counters, optional [telemetry] extra
• MCP client manager (#11) - stdio + SSE transports,
  equired_mcp_servers contracts
• Live TUI (#12) - lil dashboard --live with colors, DAG tree, budget gauge
• Risk-tiered provider routing (#19) - escalation ladders with budget-aware fallbacks
• Core modularization (#9) - supervisor + quality_plane decomposed into packages, 100% API-compatible
• Adversarial fault-injection suite (#20) - traversal fuzz, zombie tree-kill, WAL corruption matrix, 3-strike determinism
• Community recipes (#14) - four schema-validated walkthroughs

Hardening

Corrupt WAL quarantine on checkpoint apply; typed StateError on corrupt snapshots; deterministic Job Object handle cleanup; CLI env-scope fix.

Full details: CHANGELOG | Issues: #7-#20 (all closed with evidence)