# v1.7.0-alpha.0 — Guarded execution workflow

This alpha keeps longer agent work auditable without turning relay-baton into
autopilot. Everything here is deterministic and read-only — no model calls, and
relay-baton never halts an agent on its own.

## Added

- **Execution checkpoints** — `relay-baton checkpoint add <step>` appends an
  append-only JSON checkpoint per bounded execute step (command preview, changed
  files, git summary, budget snapshot, result, timestamp) to
  `.ai-session/checkpoints.jsonl`. `checkpoint list` reads them back.
- **Stop-condition policy** — `relay-baton guard [--json] [--exit-code]`
  evaluates project-configurable caps (`guardrails`: `maxSteps`,
  `maxChangedFiles`, `maxBudgetRatio`, `requireConfirmation`) against the
  checkpoints plus live git/budget state. Advisory by default; `--exit-code`
  exits non-zero (10) when a stop condition is triggered so a script/agent loop
  can halt.
- **Risk classifier** — `relay-baton risk [--json]` flags risky surfaces in the
  working tree from the git status: dependency manifests/lockfiles, file
  deletions (high severity), release/CI edits, env/build config changes, and
  binary/generated artifacts, each with a category and severity.
- **Better receipts** — `relay-baton checkpoint summary [--json]` derives a
  compact, handoff/archive/review-ready execution receipt from the checkpoints.
- **Desktop guarded-execution view** — a read-only dashboard "guarded execution"
  card (guardrail verdict + checkpoint receipt) plus Agent Room `/checkpoints`,
  `/guard`, and `/risk`, all through the CLI sidecar.

## Configuration

- New optional `guardrails` config block with defaults applied when absent
  (`maxSteps` 25, `maxChangedFiles` 40, `maxBudgetRatio` 0.9,
  `requireConfirmation` true). Existing configs keep working unchanged.

## Constraints

- Deterministic only — no model calls, no semantic analysis.
- Read-only and advisory: relay-baton reports; the human/agent decides. No
  auto-halt, no auto commit/push/PR.
- The desktop view reads only through the CLI sidecar; no business logic in the
  webview.