ActraDeck v0.4.0

ActraDeck v0.3.0

v0.2.0 — Approval policy & governance layer

Local-first, vendor-neutral control plane for coding agents (Claude Code & Codex):
approval gating, secret redaction before persist, and a replayable audit trail.

Highlights since v0.1.0:
- Per-repo approval policy with bypass/YOLO category gating: under
  --dangerously-skip-permissions / --yolo, operator-enabled high-risk categories
  (recursive-rm, disk-destroy, history-rewrite, db-drop, fork-bomb, secret-egress,
  high-risk-other) fall back to the Web UI approval card (emit -> hold -> allow/deny;
  unattended timeout -> deny). Default-on safe preset; env kill-switch to revert.
- Daemon-addressed policy relay: set per-repo policy even with no agent session, via any
  connected policy-capable daemon (approve/interrupt/diff/allowlist stay session-scoped).
- Capability gating: observe-only daemons are excluded from policy addressing.
- Policy settings UI with a read-only last-known cache (zero-connection viewing).
- Memory-authoritative policy with delta read-modify-write disk persistence; crash-safe
  control-channel disk writes.

Note: cross-vendor approval relay is Managed Mode; Attach mode is observe-only
(see the support matrix). Trust boundary: single-operator / loopback / local-fs.

chore(oss-sync): sync from private c76672c

Curated public snapshot generated by scripts/prepare-oss.sh.
Private development history is intentionally not mirrored.
407 file(s) changed.