Changes in version 0.8.1                        

  - Fixed archive privacy, pre-execution tool guardrails, per-round
    budgets, and governed-tool limits; kept only the supported user
    functions.
  - Retrieval-memory embedding operations now pass the agent's budget
    and are recorded in the trace as embed events; the model call is
    re-gated after any accounted work earlier in the same turn.
  - save_agent() refuses a config carrying a literal API key instead of
    warning and writing the key to disk.
  - The Agent R6 generator is internal; construct agents with agent().

                 Changes in version 0.8.0 (2026-07-21)                  

Initial CRAN release.

  - Reproducible LLM agents built on 'LLMR': personas, native R tools,
    pluggable memory, and declared call, token, tool, and time budgets.
  - Multi-agent conversations over a shared transcript, with turn-taking
    presets for debates, focus groups, interviews, and deliberations
    with votes; factorial experiments over those designs run in parallel
    and return tidy results.
  - Provenance throughout: every run converts to one object with
    utterance, event, call, tool, and state views; a study manifest of
    content hashes; and a sealed replication archive whose call log
    reads back through 'LLMR'.
  - Governance: declared tool side effects, guardrails on inputs,
    outputs, and tool calls, human approval gates that pause and resume,
    and a governed Model Context Protocol client.
  - A small workflow runtime with checkpoint, resume, fork, and
    hash-verified replay.