v0.2.4

[0.2.4] — 2026-10-18

Docs

• Both READMEs now open with the sandbox caveat instead of burying it: compression
  works in every mode, but a workspace-write session silently loses rtk's ledger,
  the recall database and the tee/ backups because those writes land outside the
  writable roots. The notice names both remedies — the helper script, or a
  danger-full-access session — and links the detailed section.

Docs

• Document the workspace-write limitation (rtk cannot write its state
  directory, so the ledger/recall/tee writes fail silently) and ship
  scripts/allow-rtk-state-in-sandbox.mjs to grant that one directory inside the
  Seatbelt profile, with status / apply / revert and a real write test.