io-harness 0.8.0

A Rust agent harness: run an AI agent from a typed task contract to a verified result. Provider-agnostic (OpenRouter, Anthropic, OpenAI), multi-file edits with grep/find over a workspace, budgets, retry, full trace, resumable runs, execution-based verification, a layered permission policy with a human-approval gate, contained sub-agent composition, an OS-native/OS-neutral execution sandbox (macOS sandbox-exec, Linux namespaces, Windows Job Objects, portable floor) that isolates model-produced code per run, durable checkpoint/resume for unattended runs, an MCP client (stdio and streamable HTTP) whose tools reach the agent beside the built-ins, and a deny-by-default network egress policy. Embeddable in-process.
Documentation
# Public Contract — IO Harness

The public contract is the surface other code and users depend on. Changes to it
follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html) and are
recorded in the [CHANGELOG](../CHANGELOG.md).

## Surface

A versioned Rust crate API following SemVer. No network API in v0.1; the daemon/IPC contract is deferred.

## Compatibility

- **MAJOR** — breaking change to the surface above.
- **MINOR** — backward-compatible additions.
- **PATCH** — backward-compatible fixes.

Pre-1.0.0, minor versions may break; breaking changes are always called out in
the CHANGELOG under the relevant version.

## Stability

Pre-release. The contract is not yet stable and may change between 0.x versions.
Each change is documented in the CHANGELOG and the release notes.