sheeki03/tirith

📋 What's Changed

• State-file hardening, crash-atomic writes, and tier-1 test isolation by @sheeki03 in https://github.com/sheeki03/tirith/pull/145
• Prompt-injection evasion resistance, output exfil detection, and policy-loadable seeds by @sheeki03 in https://github.com/sheeki03/tirith/pull/147
• ci: pin all GitHub Actions to commit SHAs + add Dependabot by @sheeki03 in https://github.com/sheeki03/tirith/pull/148
• Full Changelog: https://github.com/sheeki03/tirith/compare/v0.3.2...v0.3.3

📋 What's Changed

• fix: doctor policy discovery (#112) and bash degrade-state exports (#111) by @sheeki03 in https://github.com/sheeki03/tirith/pull/113
• test(pty): Rust-native PTY conformance harness (M0.1) by @sheeki03 in https://github.com/sheeki03/tirith/pull/114
• docs: roadmap/README/compatibility truth cleanup (M1) by @sheeki03 in https://github.com/sheeki03/tirith/pull/115
• Wave 2: shell trust gate — #111 capability-gate fix + M0.3 compatibility tooling by @sheeki03 in https://github.com/sheeki03/tirith/pull/116
• M2 — Engine Trust (wave 3) by @sheeki03 in https://github.com/sheeki03/tirith/pull/117
• feat: agent-session guardrails (restore report, audit chain, pending registry, suppression, memory scan) by @sheeki03 in https://github.com/sheeki03/tirith/pull/142
• M3 — Supply-Chain Firewall (wave 4) by @sheeki03 in https://github.com/sheeki03/tirith/pull/118
• Full Changelog: https://github.com/sheeki03/tirith/compare/v0.3.1...v0.3.2