v0.46.5

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• tests: the upgrade rehearsal drops main's materialized-file seed before the hop, and a late pty attach is quiesced by construction by @udaychandra in #300
• ci: a pull request learns its verdict once, in minutes, from a pipeline that runs each test once by @udaychandra in #301
• docs: the repository documents where it stands, and agents read AGENTS.md by @udaychandra in #302
• sync: the journal decides every local write, so no door can forget by @udaychandra in #303

Full Changelog: v0.46.4...v0.46.5