v0.7.21

Before you upgrade, read this release's entry in CHANGELOG.md — if it is not there yet, this release is still publishing: the entry lands when main is pushed, which happens after the archives are verified.
The bullets below are commit subjects. Any change your own tooling cannot
detect for you — a re-export you must run, a string your scripts compare
against — is called out at the TOP of that entry, and only there.

Changelog

Features

• dff80d3 feat(claim): claim show reports the claim's summary and body
• 697be37 feat(claims): required rests_on, project claims store and index, doctrine hub kill (NIT-24, NIT-25, NIT-23)
• 437f8dd feat(engine): constitution roof, lock record and the CONSTITUTION_NOT_LOCKED gate (NIT-6, NIT-26)
• b48762e feat(engine): retire the governed_by claim edge (NIT-29)
• dd0c00f feat(manifest): integration view lists what each neighbor provides (NIT-9)
• d29782a feat(manifest): split the isolation budget and emit authored summaries (NIT-10)
• 0733e17 feat(skills): teach the manifest harness reading order (NIT-12)
• c8a0595 feat(viewer): Constitution pinned above Modules — The file | Project claims (NIT-27)
• 5fbf911 feat(viewer): drop the GOVERNED BY row, edge type and governance overlay (NIT-29)
• 581a62c feat(viewer): render module manifest tab (NIT-19)
• c719b89 feat: cap claims per module at 10 by default (NIT-14)
• bd584f5 feat: gate claim reaudit --confirm behind the constitution lock (NIT-26)
• 38b5420 feat: hard-lock facets to contract|internals (NIT-20)
• 5b3dd11 feat: module manifest harness + show/list (NIT-7)
• 4075972 feat: remove build_role; code-link gate covers every locked module claim (NIT-32)
• f2ebcf3 feat: remove orientation-note kind and reserved overview facet
• 60ca181 feat: require claim summary and cap claim body size (NIT-8)
• ac2b19e feat: retire the mirrors claim edge (NIT-17)

Bug fixes

• 64f6fd5 fix(catalog): never emit an internals id; keep blocked state and count dropped edges
• da7a3d3 fix(check): --staged measures shared-context-budget on the staged constitution
• 61ac1ad fix(check): catalog_count reports the entries catalog.json holds
• e75f41f fix(check): read the project-claims store from the index in check --staged
• 317292c fix(claim): claim new previews its manifest stub and never half-writes
• c5fc29e fix(cli): name the upgrade fold when a retired field refuses a load
• ef65ea5 fix(cli): name the upgrading skill's mirrors fold in the retired-field hint
• 6e94a67 fix(constitution): lock sets only the status, under the sentinel, atomically
• becb2f4 fix(fixtures): correct claim prose that named retired schema
• cb3519b fix(implink): name the code-link gate's real scope in impl-links output
• 36a3c55 fix(lint): clear NIT-6 fallout on release/v0.7.21
• 3772ad9 fix(lock): hash rests_on none once and retire mirrors with no shadow field
• d16199d fix(lock): make the --semantic-conflict refusal say where the conflict lives
• 0f758b2 fix(lock): retry Windows lock-store rename under concurrent readers
• aee0508 fix(lock): stamp the policy carry-over with the store clock and format
• cd75f51 fix(manifest): check refuses a module over its isolation budget
• af2d8e1 fix(manifest): list reports the findings show and check report
• 7cea740 fix(model): read v0.7.20 lock-store snapshots whose rests_on is a list
• 3baf017 fix(model): refuse unknown keys and ids in the rests_on none mapping
• cf8bfbd fix(readiness): use the package's contains helper in the oracle test
• 0c623d4 fix(viewer): always open a module on its Contract tab
• ea9b827 fix(viewer): keep a project claim out of the Ungrouped module
• efcd7c6 fix(viewer): make project claims first-class and tidy the roof's layout
• e1ff521 fix(viewer): open a module on its first tab that holds claims (NIT-20)
• 2362b90 fix: delete claim migrate-lock-policy instead of retiring it
• a261960 fix: drop unused oraclecontains leftover from NIT-29
• f007d70 fix: finish markdown cost sweeps under Windows race
• e9380f4 fix: gofmt checkData.CodeLinks alignment
• fbb0488 fix: make kill-mirrors pass CI (gofmt, hash letters, viewer tests)
• 1894387 fix: refresh surface, fixtures, and render report after kind removal
• 8ab9ab0 fix: retire claim migrate-lock-policy from the everyday surface

Other changes

• cab5ba1 Align surface counts, goldens, and viewer nav with retired build-order
• 38c6220 Delete leftover build-order code and citations
• 63802b2 Fix leftover-delete tests, goldens, and CSS
• 04eb26b Remove build-order as a product surface (NIT-15)
• b9cbb31 Remove leftover build-order code that failed CI lint
• 25b8d84 Stop requiring leftover build-order in docs and tests (NIT-15)
• f6e8903 chore(release): prepare v0.7.21 stamps
• 4515818 chore(release): refresh surface.json and the across-release report; record graph-safety PASS
• 20072b7 chore(release): regenerate surface, fixture viewers and the across-release report on v0.7.20
• c287806 chore(skills): add test-audit maintainer skill adapted from OpenClaw
• 2b5da26 docs(changelog): correct Unreleased counts, add upgrade steps and missing surface changes
• f7c4c97 docs(comments): drop the stale overview-facet note and re-home loadClaims' doc
• 357692a docs(graph-safety): evidence for the catalog internals redaction
• 622288e docs(graph-safety): v0.7.21 release evidence
• fb50ee6 docs(releasing): race suite uses -timeout=20m like CI
• b98419d docs(skills): claim show cannot name a --semantic-conflict refusal
• a543e1c docs(skills): recovery rows for every reachable code, mirrors and new-requirement folds
• 28c9960 docs(skills): walk an upgrading doctrine-hub corpus through the constitution fold (NIT-23)
• 0132b60 fix(hook-test): declare both engine facets in smoke fixtures (NIT-20)
• 1487b7c fix(skills,lint): caps name the human as the only one who raises them; embodiment none is the code-free opt-out (NIT-34)
• 3319a24 refactor(lock): retire lock policy 0; local approval v1 is the only policy
• 2df91e5 refactor: remove build-order dead code and apply the v0.7.21 test audit
• 0a9c5f0 skills: prune retired bundles on export; split router/claims into modules, constitution, upgrading
• 836056e test(cli): pin check --staged and --validate agreement on project claims
• 013ec57 test(hook): arm the roof and rests_on in the smoke-test fixtures
• 13b6de1 test(readiness,graph,catalog): prove project claims as graph nodes
• 4ddb145 test(viewer): assert the constitution roof as rendered in a browser
• 217d548 test(viewer): re-pin the graph pane to schema 2 and five overlays (NIT-29)
• 21028a6 test(viewer): split over-budget test corpora into modules of 30 or fewer claims
• 1af311e test(viewer): update three browser tests for engine-fixed facets (NIT-20)
• adbee49 test(viewer): wait for the served verdict and still pages before asserting
• b7e1225 test: cover project claims end to end, in lint fixtures and in the loader
• 01747df test: fixtures, goldens and every suite under the always-on roof gate
• fac4db1 test: pin claim show's summary/body in the envelope contract golden; errcheck fixes
• 558385a test: pin the live surface at 24 commands
• a1258f3 test: prove every claim cap refuses at check and lock (NIT-11)
• e41cbf2 test: refresh the across-releases report for the locked roof in every fixture
• a24ff4e test: regenerate the across-releases report for the catalog internals redaction
• 02d555c test: run check --staged on the project-claims fixture and in the hook smoke test

---

The full account of this release is its CHANGELOG.md entry — the only place a
breaking change, or a change that alters behaviour without altering any command, is
written out with its recovery steps:

https://github.com/BarterX-Tech/dossierx/blob/main/CHANGELOG.md

The notes above are grouped commit subjects, and a feat line reads exactly the same
whether or not it breaks your build.