v0.9.3 — Security Hardening & Trust Audit

v0.9.3 — Security Hardening & Trust Audit

Security

• HardenedSandbox: Wired into exec denied-paths + SSRF pinning (S2/S3/S4 defenses)
• Trust Audit v0.9.2: Full brutally-honest audit — what's proven, partial, experimental, planned

Fixes

• Honest labels throughout README (gateways/voice/share marked 🔶 alpha)
• Hardened installers (install.sh + install.ps1)
• Fixed GitHub Action configuration
• Version coherence: package.json and docs/AUDIT.md synced to v0.9.x
• CI gates: No shipping stubs, action.yml validation, installer syntax checks

Crates

• sparrow-tools v0.9.3 (new — extracted tool implementations)
• All workspace crates bumped to v0.9.3