chore(main): release 0.2.2

[rigelbuild-compass-release]

🤖 I have created a release beep boop

0.2.2 (2026-09-13)

Features

• cli: show the runtime tier and egress posture per session (#1153) (bb80c05)
• ingest: advance a suppressed subscriber's delivery cursor when caught up (RIG-3326) (#1185) (bff25ca)
• ingest: self-origin notification suppression seam and predicate (RIG-3326) (#1177) (9a53159)
• runner-image: carry the Runner, KVM userland and guest assets in a container image (RIG-3720) (#1164) (0dce952)
• runner-image: publish the runner image by digest (RIG-3721) (#1181) (a2805af)
• runner: carry no egress policy on a backend that cannot enforce one (#1145) (332c075)
• runner: declare the runtime tier and egress posture at enrollment (#1156) (612b9cd)
• runner: deliver the agent socket and config by path on the host backend (RIG-3512) (#1135) (a9ce14a)
• runner: derive the agent uid from the Runner's euid on the host backend (RIG-3512) (#1125) (684558b)
• runner: report the runtime tier and egress posture per session (#1148) (4d0347b)
• runtime: add the host-process WorkloadRuntime backend (RIG-3512) (#1120) (f9db16d)
• runtime: distinguish a configured egress policy from an unset one (#1142) (2108d46)
• runtime: refuse an egress policy the host tier cannot enforce (#1143) (ef908d5)
• ui: mark each agent's runtime tier and egress posture (#1154) (2317604)

---

This PR was generated with Release Please. See documentation.

[trunk-io]

Merging to main in this repository is managed by Trunk.

• To merge this pull request, check the box to the left or comment /trunk merge below.

After your PR is submitted to the merge queue, this comment will be automatically updated with its status. If the PR fails, failure details will also be posted here

[github-actions]

Compass engineering docs preview: https://release-please--branches--ma.compass-eng-docs.pages.dev

Deployed from release-please--branches--main at 68a670b.

Changed pages:

• CHANGELOG.md