v1.0.0

What's Changed

• RedWrench v1.0 by @simonives in #1
• Add streaming output and cooperative cancellation to command execution by @simonives in #18
• Close four small policy-hardening and cleanup gaps (#7-#10) by @simonives in #20
• Open README with the project's actual origin story by @simonives in #19
• Fix: rmcp's Host allowlist rejected every real remote client by @simonives in #21
• Fix: full command output was leaking into the persistent journal by @simonives in #24
• Add capability and policy discovery (list_capabilities, check_command, self-teaching denials, MCP resources) by @simonives in #32
• Fix: safe tier's unscoped journalctl_tail exposed the whole system journal by @simonives in #33
• Add a developer policy tier: privilege-dropped bash/python/gcc/node/npm/cargo/make by @simonives in #34
• Invert developer tier's privilege-drop default to an explicit stays-root allowlist by @simonives in #36
• build(deps): bump actions/checkout from 4 to 7 by @dependabot[bot] in #14
• build(deps): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #12
• build(deps): bump toml from 0.8.23 to 1.1.5+spec-1.1.0 by @dependabot[bot] in #17
• build(deps): bump schemars from 0.8.22 to 1.2.2 by @dependabot[bot] in #16
• build(deps): bump axum from 0.7.9 to 0.8.9 by @dependabot[bot] in #15
• build(deps): bump tower from 0.4.13 to 0.5.3 by @dependabot[bot] in #13
• build(deps): bump clap_mangen from 0.2.33 to 0.3.3 by @dependabot[bot] in #11
• Cut v1.0.0: RPM packaging, changelog, and a public roadmap by @simonives in #37

New Contributors

• @simonives made their first contribution in #1
• @dependabot[bot] made their first contribution in #14

Full Changelog: https://github.com/simonives/redwrench/commits/v1.0.0