v0.12.8

Bug Fixes

• Also delete context.json in-container (source_yaml leaked criteria)
  (#179,
  ddf63e9)

• anti-cheat: Apply multi-model review findings M1/M2/M3 + doc drift
  (#179,
  ddf63e9)

• anti-cheat: Apply review Low findings L1/L2/L3
  (#179,
  ddf63e9)

• antigravity: Read token usage from the conversation, not the Step
  (#201,
  101bb5c)

• codex: Record provider error notifications on the turn
  (#203,
  894f742)

• docker: Close two driver:docker channels that leaked grading material to the agent
  (#179,
  ddf63e9)

• simulation: Send the simulated user's utterance, not its tagged transcript
  (#204,
  ffb9a81)

Documentation

• harness: Log deferred Low findings from anti-cheat review
  (#179,
  ddf63e9)

Features

• lint: 3/3 — CE065 flags eval material inside a skill dir
  (#179,
  ddf63e9)

• sandbox: 1/3 — delete staged task.yaml in-container after load (anti-cheat)
  (#179,
  ddf63e9)

• sandbox: 2/3 — allowlist tmpfs-mask of auto-mounted plugin trees
  (#179,
  ddf63e9)