v1.0.2

Patch release rolling up the fixes validated across rc.1–rc.3.

Fixed

• cheatcode_install materializes every attachment target (GH 1137): materialization keyed solely off the optional target arg, so installs recording attachment rows could skip the on-disk agent materialization when the caller omitted it — the DB said attached, the agent never loaded the capability. The handler now materializes each distinct attachment target (union with the explicit arg) and surfaces materialized[] per write.
• SWE spawn-gate deny remedy is runnable in remoteless repos (GH 1132): the prescribed branch-create hardcoded origin/<base>, fatal without an origin remote; the remedy now probes the remote and substitutes the task's concrete parent branch.
• Verification gate denies with a visible reason and a budget that fits the full suite (GH 1121): the timeout and verification-failed branches emitted denyReason — a field Claude Code does not surface — so swe received reasonless denials. All three branches now emit permissionDecisionReason with the resolved budget named in timeout messages, and the default TMB_VERIFICATION_TIMEOUT_S rises 240→900s so specs listing tests/run-all.sh (~295s) no longer force the waiver escape hatch.
• slash-detect audit INSERT survives writer locks (GH 1134): the single 3s-timeout attempt with silent failure could drop the roundtable_slash_invoked row under longer WAL writer locks; now 3 attempts × 5s with a loud stderr warning on final failure, still fail-open.