v0.2.0

What's Changed

• feature: route Eino slash commands through tools by @zzqDeco in #28
• refactor: move Eino tool executor into runtime by @zzqDeco in #29
• refactor: make runtime Eino-only by @zzqDeco in #30
• refactor: remove direct agent by @zzqDeco in #31
• fix(kag): render generated model config values by @zzqDeco in #32
• fix(kag): bypass local proxy for real adapter endpoints by @zzqDeco in #33
• design: define permissioned KAG security contracts by @zzqDeco in #42
• spike: define safe KAG query interception boundary by @zzqDeco in #43
• feat: add catalog projection planner by @zzqDeco in #45
• feat: add OpenFGA authorization foundation by @zzqDeco in #44
• feat: add durable projection store by @zzqDeco in #46
• feat: cut builds over to projection bundles by @zzqDeco in #47
• feat: bind KAG primitives to authorization context by @zzqDeco in #48
• feat: authorize retrieval evidence before generation by @zzqDeco in #49
• feat: wire permissioned KAG queries into runtime by @zzqDeco in #50
• feat: add revocation-safe authorized query cache by @zzqDeco in #51
• feat: bind permissioned session resumes by @zzqDeco in #52
• feat: enforce revocation-safe permissioned replay by @zzqDeco in #53
• test: add permissioned KAG acceptance suite by @zzqDeco in #54
• Define permission-safe graph identity bindings by @zzqDeco in #62
• Implement real permissioned KAG primitives by @zzqDeco in #63
• Reify source-backed claims and restrict graph traversal by @zzqDeco in #64
• Authorize bounded multi-hop Claim traversal by @zzqDeco in #65
• Secure derived graph knowledge and protected query surfaces by @zzqDeco in #66
• test: add Phase 2 permissioned graph acceptance by @zzqDeco in #67
• release: prepare v0.2.0 by @zzqDeco in #68
• release: v0.2.0 by @zzqDeco in #69

Full Changelog: v0.1.1...v0.2.0