v0.2.2

New Features

• Allowed clean managed-worktree removal without enabling destructive Git deletion policy. #12

Bug Fixes

• Allowed trusted operator Git commands to run in manifest-declared local repositories while preserving native-tool containment. #10
• Fixed manifest-derived tool access across both per-agent allowlists and blocked installs on explicit deny conflicts. #9
• Updated policy denials to identify the controlling field and required operator change. #12

Notes

• Removed transport-dependent ask policy decisions in favor of explicit allow and deny settings with migration diagnostics. #12