Portal v0.33.0 — Trust-aware action discovery and clean runner re-enrollment

Models now see only action contracts backed by an exact pack version an operator still trusts, and operators can remove or deliberately reset a runner's local identity without leaving its cached token behind. Existing runners keep their identity unless an operator chooses the reset.

Security

• MCP catalog, search, exact lookup, runner inspection, and runbook recovery exclude pending, rejected, revoked, retired, hash-mismatched, and incomplete pack versions. Those trust decisions remain visible to operators and in audit, not to the model.
• The runner page keeps an unavailable advertised action visible for diagnosis but locks Run and explains whether its pack is untrusted or retired. Dispatch revalidates the contract, so a stale page or tool call cannot execute after trust changes.
• OAuth return targets now survive SSO and registration with their original local query string. External return targets remain rejected.

Runner lifecycle

• install.sh --uninstall removes the cached token, legacy token file, and generated runner identity while preserving configuration, local evidence, and logs. --purge still removes the retained files too.
• Supplying a different enrollment key during an interactive reinstall asks whether to preserve the existing external identity or reset it. Unattended resets require --reset-identity, and the runner guide documents the equivalent manual procedure.
• A failed reinstall restores the previous enrollment key and local authentication state with the previous binary and service.

MCP and clients

• Runbook recovery fails closed if trust changes between action inspection and execution, without revealing the hidden pack version through recovery results.
• ChatGPT tool annotations distinguish read-only calls from mutations, and domain verification accepts OpenAI's text challenge.
• Claude conformance evals select MCP authentication by mode and skip interactive permission prompts during headless runs.

Operations

• A new public respond-to-production-incidents skill gives customer agents a bounded observe, diagnose, act, and verify workflow.
• The Packs page follows the live catalog and gives unadvertised versions one day to disappear before cleanup.

No migration or required runner restart is introduced by this product release.