[Harshith029]

What and why

Cuts 0.2.3, which ships what merged since 0.2.2:

• Findings-catalogue fixes, part 4 (low/info items and design notes) #8: catalogue fixes. Atomic Cosmos writes (create_item), explicit fail-closed checks instead of assert, a sentinel-prox[cosmos] extra (without it Cosmos persistence could not start), indexed SQLite timestamps, and attack labels from tool-name verbs for any server.
• Project site with an animated landing page, rea-style README, community files; remove the Render demo and deck #9: the project site, the rea-style README, and the community files. Publishing also refreshes the PyPI page, which still shows the 0.2.2 README and the old Render URL.

Changes: pyproject.toml 0.2.2 → 0.2.3, the release workflow's example tag, and the CHANGELOG [Unreleased] section becomes [0.2.3] — 2026-10-19, with an upgrade note:

• No configuration changes. Cosmos users install the cosmos extra.
• The SQLite store migrates in place on first open. To roll back, restore a backup instead of running 0.2.2 on the migrated file: spans 0.2.2 writes get no value in the new ts column, and upgrading again does not fill it in (the backfill only runs when the column is missing). Checked against both versions' code.
• Names the two removed helpers (create_cosmos_store, build_web_server); only one was in the changelog.

After merging

The tag publishes: git tag -a v0.2.3 -m "..." && git push origin v0.2.3 starts release.yml, which re-runs lint, types and tests, checks that the tag matches pyproject.toml, and waits for approval on the pypi environment before uploading.

Testing

• On dependencies synced to versions.lock (mcp 1.30.0): pytest 688 passed, 12 skipped (quarantined real-MCP diagnostics), 1 expected xfail. ruff and mypy --strict clean. scripts/check_versions_lock.py: 0 conflicts.
• python -m build makes sentinel_prox-0.2.3 (sdist and wheel); twine check passes both. The sdist holds only src, tests and metadata (no website/ or node_modules). The wheel's metadata has version 0.2.3 and the new project URLs.

Security invariants

• No code changes. Version, release notes and a workflow comment only.

🤖 Generated with Claude Code