v2.3.0 — audit closure (security + hardening)

Closes the 35-finding adversarial audit (+ new finds): TTY containers now
confined, resource limits (cpu/pids/memory) enforced in-guest, TEE attestation
hardened, CRI lifecycle + cross-process data-loss races + resource leaks fixed.
Real-VM measured (CPU throttle, cgroup limits, TTY CapEff/Seccomp) + soak/scale
validated (0 leaks, 0 races over ~230 ops / 36 concurrent).

a3s-box v2.2.0 — correctness & hardening release

24 fixes across the CLI state machine, runtime resource limits, guest-init
I/O, the OCI store, networking, the warm pool, and the CRI server (#31-#54).
No breaking changes. CRI conformance re-verified at 73/7/17, zero regression.

v2.1.0 — native snapshot-fork (CoW), warm-pool CoW fill, prune

Re-cut from main with all 9 workspace crates uniformly at 2.1.0 (a3s-box-sdk
and a3s-libkrun-sys now inherit the workspace version). Native CoW microVM
cloning, pool --snapshot-fork, prune; vendored libkrun d2aa638 (arch-gated).

v2.0.7 — container log pipeline matches Docker json-file (Windows bui…

…ld fixed)

a3s-box v2.0.6 — CRI maturity: SecurityContext, writable volumes, sec…

…urity/safety hardening (critest 21->44, 16 audited fixes)

a3s-box v2.0.5 — CRI reachable over UDS (crictl/kubelet) + working SP…

…DY exec

A3S Box v2.0.4

a3s-box v2.0.3

a3s-box v2.0.2

chore: bump version to v2.0.1

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>