v0.46.4

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• test: the incus suite's image bake gets a package-install budget and fails the run once by @udaychandra in #289
• sync: a review's findings sync with it, so every box holds the same review by @udaychandra in #290
• files: a box remembers which version of a shared file it wrote by @udaychandra in #291
• events: an event drives only what its sender may drive by @udaychandra in #292
• loop: every agent run launches, is watched and stops one way, under its lane's limits by @udaychandra in #293
• loop: a waiting review's rescue is tried a bounded number of times, and an agent no kill was tried on exited on its own by @udaychandra in #294
• loop: every wait is recorded, every review ends, every stop says only what happened by @udaychandra in #295
• loop: one function decides every step, one class carries it out, and its tests run in seconds by @udaychandra in #296
• harness: adding a coding harness is adding one adapter by @udaychandra in #297
• project: what runs a project reads it from the catalog, never from a file by @udaychandra in #298
• skills: a project says how each stage works; sail still runs the loop by @udaychandra in #299

Full Changelog: v0.46.3...v0.46.4