Portal v0.45.0 — The v1 failure-path pass

This release closes recovery, revocation, and publication failures found in the final v1 audit pass.

Security

• A runner with corrupt legacy replay state now refuses to start instead of risking a duplicate infrastructure change.
• Membership removal revokes API keys and device grants in the same transaction. Pending and expired invitations remain unauthorized until acceptance completes.
• Sentry strips active TOTP seeds and recovery codes from LiveView state. Run audit events now include the dispatch justification and complete policy decision evidence.

Runner

• The dispatch journal uses bounded atomic snapshots, and the managed updater validates a staged binary against fielded configuration before stopping the service.
• Wrapper arguments, action descriptors, and structured results receive stricter validation. Secret-shaped values stay masked without flattening valid JSON.
• The changed action authoring schema publishes as immutable v7 objects; existing v6 objects remain untouched.

MCP

• Paging, action counts, argument limits, and emitted error codes now match the published tool contract.
• Client configuration writes detect concurrent edits and preserve accepted formats. Emisar credentials no longer reach browser child processes.
• Installers authenticate signed checksum metadata and reject unpinned downgrades. Windows reinstalls repair stored credentials even when the parent shell has direct-command credentials.

Packs

• The 99-pack catalog was reviewed for real-world risk, source redaction, output caps, host access, HTTP failures, shell boundaries, and false healthy results.
• Versions that skipped their required approval gate were retired. Registry publication rejects stale catalog generations.

Upgrade

Upgrade fielded hosts to Runner v0.25.0 and workstation integrations to MCP Bridge v0.12.0 after their component release workflows finish.