v0.17.0

What's Changed

• fix(skills): convert unsupported >- block scalar modifier to > in all skill files by @bug-ops in #2088
• feat(skills): auto-provision bundled skills to managed dir on startup by @bug-ops in #2090
• feat(router): RAPS Bayesian reputation scoring (#1886) by @bug-ops in #2091
• feat(memory): AOI three-layer hierarchical memory architecture by @bug-ops in #2092
• test(config): add similarity_threshold upper-bound validation test in PlanCacheConfig by @bug-ops in #2096
• test(memory): add unit tests for SqliteStore tier DB methods by @bug-ops in #2097
• docs: remove dead feature gate references by @bug-ops in #2103
• fix(memory): use source conversation_id in AOI tier promotion by @bug-ops in #2105
• chore(testing): add canonical config/testing.toml with provider=router for RAPS coverage by @bug-ops in #2107
• feat(config): promote scheduler and guardrail features to default by @bug-ops in #2106
• chore(llm): remove redundant schema feature gate from zeph-llm by @bug-ops in #2108
• feat(config): enable 8 validated settings by default (#2101) by @bug-ops in #2109
• test(cost): add unit test for max_daily_cents=0 unlimited budget by @bug-ops in #2111
• fix(tui): remove duplicate ToolStart/ToolOutput events in TUI bridge (#2116) by @bug-ops in #2118
• fix(tools): expand ~ in allowed_paths before canonicalization by @bug-ops in #2119
• fix(sidequest): handle ToolResult in rebuild_cursors and apply_eviction by @bug-ops in #2120
• fix(policy): propagate skill trust level to PolicyContext in PolicyGateExecutor by @bug-ops in #2123
• feat(experiments): wire eval_model config field to evaluator construction by @bug-ops in #2124
• test(tools): add FileExecutor allowed_paths integration tests (#2117) by @bug-ops in #2127
• test(channels): add injectable test transport to TelegramChannel by @bug-ops in #2128
• fix(tui): replace streaming chunk append with canonical body_display on ToolOutput (#2126) by @bug-ops in #2129
• fix(tools): normalize .. in resolve_via_ancestors to prevent sandbox bypass by @bug-ops in #2130
• test(channels): add Telethon-based E2E test suite for Telegram channel (#2122) by @bug-ops in #2131
• fix(config): vault token resolution must not auto-create channel configs by @bug-ops in #2133
• feat(security): response verification layer for post-LLM injection detection (#1862) by @bug-ops in #2149
• feat(config): unified [[llm.providers]] schema (#2134) by @bug-ops in #2148
• feat(core): add /provider command for runtime provider switching by @bug-ops in #2150
• feat(llm): complexity-based triage routing for multi-provider pool by @bug-ops in #2153
• release: v0.17.0 by @bug-ops in #2154
• chore(deps): update github-actions by @bug-ops in #2155
• fix(core): use effective_model() fallback in /provider switch by @bug-ops in #2156
• test(core): add unit tests for /provider command handlers by @bug-ops in #2157

Full Changelog: v0.16.1...v0.17.0