PatchForge v1.2.0

PatchForge v1.2.0 is released.

Highlights

• Candidate-promotion apply protocol with isolated validation and atomic publication of patchforge/<run_id> branches.
• Versioned validator configuration, authorization decisions, and centralized subprocess timeout policy.
• Explicit operator credential resolution, shared provider policy, and effect-free Plan, Preview, and initial CI preflight rejection handling.
• Audit bundle export and verification with optional redaction and GPG signatures.
• Python subproject support for monorepos and aligned doctor/scan compatibility checks.
• Attested review-evidence@3 plan and diff producers with an advisory consumer.

Compatibility notes

• patchforge apply promotes a validated candidate commit instead of modifying the caller's working tree.
• --risk-budget accepts low and medium only; historical high run metadata remains readable.
• Default workspaces and explicit credential files must remain outside the target repository.
• review-evidence@3 remains advisory. This release does not enable a decisory merge gate.

Validation

• Ruff lint and format checks passed.
• Full test suite: 1112 passed, 7 skipped.
• Package build produced orchestrator_core-1.2.0-py3-none-any.whl and orchestrator_core-1.2.0.tar.gz.

Release commit: 8f6e98f0334487e40c1ae173a90f446891d9007a.