v4.4.0

Verify this release before installing — see
documentation/how-to/release-verification.md.

Changes: CHANGELOG.md.

What's Changed

• fix(preflight): require explicit caller hostname allowlist by @Arcanada in #494
• test(dr-jev-control): telemetry failure test must never write to / by @Arcanada in #495
• fix(ci): bind download-artifact comments to exact v8.0.1 pin by @Arcanada in #498
• fix(jev): refuse nonfinite explicit wall-clock caps by @Arcanada in #499
• fix(ci): isolate tool setup, preserve hosted Linux and UTC review windows by @Arcanada in #501
• fix(installer): refuse consumer paths inside product source by @Arcanada in #497
• fix(jev): preserve doctor diagnostics after version probe errors by @Arcanada in #500
• docs: link Jev configuration guide and CLI reference by @Arcanada in #502
• docs(explanation): product-discovery pack boundaries and integration contract (ADR) by @Arcanada in #503
• Add product discovery plugin and artifact checker by @Arcanada in #504
• [D5A-T3.4] Add product claim-quality rules and cases by @Arcanada in #507
• Add hypothesis validation method and fixtures by @Arcanada in #506
• fix: repin rust toolchain to reachable stable commit by @Arcanada in #509
• feat(product-discovery): add product-framing skill by @Arcanada in #508
• D5A-T2.3: gate product profile and strategist schema v2 by @Arcanada in #505
• feat(product-discovery): add decision records and scope modes [D5A-T3.3] by @Arcanada in #510
• feat: add bounded product discovery agent fragments by @Arcanada in #512
• feat: route accepted product research into PRD safely by @Arcanada in #511
• feat: model plugin assets in canonical framework graph by @Arcanada in #513
• fix(ci): repin Rust toolchain to upstream stable history by @Arcanada in #515
• feat(release): prepare v4.4.0 by @Arcanada in #516

Full Changelog: v4.3.7...v4.4.0