feat(safe-exec): harden curl validation and add security posture framework

CHANGELOG.md

@@ -2,6 +2,23 @@
 
 All notable changes to traust-engine are documented here.
 
+## [0.2.1]
+
+Harden `safe_exec` validation of target-derived curl commands: options are
+now vetted by a full option walk (unknown options denied), URLs restricted
+to http/https. Adds optional `curl_allowed_hosts` and `keep_env_heads`
+profile fields. See SECURITY.md for reporting details.
+
+Introduces a security posture framework (`restricted`, `baseline`, `privileged`,
+with `high`, `medium`, `low` aliases) set per profile or file-wide via
+`defaults.posture`. `restricted` enforces fail-closed behavior (curl denied unless
+hosts are allowlisted, redirects denied, env scoping required on pipelines).
+`baseline` permits public http/https egress while denying private IP ranges
+(RFC 1918, loopback, link-local/cloud metadata) and internal domains unless
+allowlisted. `privileged` retains permissive fail-open behavior.
+`run(honor_bypass=True)` threads `allowed_hosts` when recovering segments,
+so a bypassed pipeline still splits instead of collapsing into one argv.
+
 ## [0.2.0]
 
 ## Changes

VERSION

@@ -1 +1 @@
-0.2.0
+0.2.1

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "traust-engine"
-version = "0.2.0"
+version = "0.2.1"
 license = "Apache-2.0"
 description = "Processing core for the AI security harness: scanners, data management, analysis, format handlers"
 requires-python = ">=3.11"