v1.0.0-rc.2

Universal Config Engine 1.0.0-rc.2

This candidate keeps the RC1 runtime and public API while hardening the package and
stable release surfaces before 1.0.0.

Package Documentation

Every published package now carries its own npm README with package-specific
installation, minimum usage, runtime requirements, contract boundaries, and links
to maintained documentation. Packed-package smoke fails if any README is absent or
does not identify its package and repository.

Stable Release Safety

Stable publication now fails closed unless release-policy.json authorizes the
version and its reviewed candidate has:

• completed the declared minimum review duration;
• a published GitHub prerelease with all five tarballs;
• complete package-level publication evidence;
• npm integrity and SLSA provenance;
• correct next and latest dist-tags;
• a successful exact-version registry installation smoke.

Packed Type Migration Guard

Strict TypeScript consumers now compile the packed core declaration and prove that
the supported ValidatorIssue fields remain available while category, message,
sourceId, and details remain outside the public type. This catches drift between
source-level type tests and the declaration shipped to npm.

Migration

The only intentional breaking API change remains the RC1 removal of ignored legacy
ValidatorIssue fields. See the 1.0 migration guide.

Install this candidate by exact version or npm next; npm latest remains on the
previous stable release.