v0.2.0

Added

• Host-shaped egress grammar (Track A — evidence validity). NetEgress
  targets must pass a URL/IPv4/IPv6/scp-style HostShaped grammar before
  binding, so git subcommands, commit SHAs, pathspecs and awk regexes no longer
  fabricate network effects, and secret-tainting can no longer pair with a
  phantom egress (C5 consistency).
• Canonical effect form and an additive per-command CommandCall view
  (Track D — determinism). A canonical effect set folds staging-file
  lifecycles onto the final target, giving downstream consumers a stable,
  retry-recognizing signature.

Changed

• Hardened argument-scope binding and bash expansion resolution; extended the
  benign corpus.
• Fixed a stale description in the README.