v0.63.0

Changes

• ci(release): publish claude plugin only after crate is published to crates.io (cb2bcff)
• fix(supply-chain): treat systemg root crate as first-party in cargo-vet (audit-as-crates-io = false) (8897dcf)
• ci(commit-check): run cancel-previous before the commit-message check (6548c69)
• chore(plugin): sync claude plugin version to v0.63.0 (890feea)
• fix(ci, test): deflake auto-restart test; replace broken virtme kernel-matrix with native-kernel Landlock lane (05a8974)
• ci(commit-check): enforce type(scope) commit format, gate audit/deny/vet on it (4b1a322)
• fix(ci): v2 test manifests, re-disable legacy uat suites, update purge/sys-root tests for SG0405/SG0704; sandbox lane seccomp+landlock flags (fa87ba2)
• test(model): model-based sequence harness — random lifecycle ops, oracle+model checked every step; CI matrix (68b581b)
• feat(doctor): pid-reuse + empty-teardown invariants; wire teardown oracle into parity (f39076c)
• feat(doctor): invariant oracle check_world() + sysg doctor; wire into parity UAT (82e8c4d)
• fix(ci): clippy clean on linux both arches — io::Error::other, arch-conditional mut/return; SG links out of SVG text (47b2976)
• docs(kernel-mode): add per-platform kernel-interaction diagram (userspace↔kernel boundary) (c145655)
• docs(kernel-mode): resolve Phase 4 — pidfd ships, eBPF evaluated and declined; all four phases complete (472aec5)
• feat(sandbox): seccomp baseline-v1 enforcement (SG0722), parent-compiled BpfProgram + child raw-syscall apply (574b3e9)
• feat(sandbox): schema v3 fail-closed + Landlock/no_new_privs enforcement (SG0724), sandbox UAT + CI (6d4f4cc)
• feat(sandbox): manifest schema v3 fail-closed — refuse unenforceable security keys in parent before spawn (0b63c5b)
• feat(macos): system mode on /Library paths + launchd installer; native smoke-test lane; docs (93fa3ab)
• feat(init): container-init teardown — fix init-mode wait() hang, broker orphan reaping, reverse-order shutdown, pid1 UAT suite (d9a061f)
• feat(init): reverse-dependency-order teardown + SG0713 survivor verdict on init exit (be56831)
• feat(init): PID1 wait broker with routed mailbox, ECHILD-safe waits, TERM/INT shutdown bridge (d2e37f1)
• feat(init): sysg init subcommand with PID1/prereq preflights, SG0711-0714, upgrade refusal in init mode (7de5a6e)
• feat(validate): mode-aware enforceability pass — SG0705, startable field, rootless --sys validate, docs callout (6777b09)
• feat(monitor): pidfd-based instant exit detection with polling fallback; sandbox keys warn of fail-closed deprecation (3fa6869)
• docs(kernel-mode): record reduced-v1 scope decision in RFC and docs callouts (f1fba1c)
• fix(purge): stale pidfile no longer bypasses live-socket supervisor shutdown; SG0405 covers scoped purge (90e9d9d)
• feat(kernel-mode): docs/kernel-mode section, purge ghost-supervisor fix (SG0405), weekly fuzz CI, release gates on deny+vet (828f4d8)
• feat(kernel-mode): alpine/musl parity lane + setrlimit musl fix, non-root user lane, exec-drop regression case, cargo-vet (3753517)
• feat(kernel-mode): phase 0+1a — audits program, cargo-deny, ipc fuzzing, SG0701-0704, --sys exec-drop fix, parity UAT lanes, musl+UAT CI (9b70fcb)
• rfc: embed red-team objections as callouts in kernel-mode design (50fa7df)
• rfc: kernel mode design (system/init/sandbox/ebpf) with SG07xx and test matrix (3945948)
• chore(plugin): sync claude plugin version to v0.62.3 (9a34f26)

Full changelog on GitHub