What's Changed
- feat(audit): capture pre/post merkle roots in audit trail and intro signing by @lukehinds in #695
- chore: remove CLAUDE.md and AGENTS.md by @lukehinds in #707
- chore(docs): SECURITY.md with guidelines by @lukehinds in #735
- fix(policy): move .claude.lock to allow_file for least-privilege access by @kipz in #733
- feat(reverse-proxy): add http upstream support by @lukehinds in #731
- refactor(docker): move dockerfiles and update build workflow by @lukehinds in #736
- chore(test-env): isolate integration tests from audit artifacts by @lukehinds in #738
- feat: add unsafe_macos_seatbelt_rules profile field by @advaithsujith in #719
- chore(cli): make path and policy messages informational by @lukehinds in #745
Full Changelog: v0.39.0...v0.40.0