Foreman v0.2.9.0

Foreman v0.2.9.0

Foreman v0.2.9.0 adds a smaller, executable Council preflight boundary. The new
runtime uses Node.js 24 and TypeScript. It builds as one self-contained ESM
file and does not load workspace TypeScript source at run time.

Product changes

• Add the council-preflight executable.
• Compile the Attempto Controlled English contract before a provider starts.
• Support bounded canaries for Grok, Claude, and Codex.
• Bind each successful canary response to a unique challenge nonce.
• Return typed, secret-safe failures for invalid input, provider failures,
  timeouts, output limits, and unsupported Google dispatch.
• Bound input, output, artifacts, observed diffs, process time, and temporary
  files.
• Resolve relative Council runtime paths once, before provider dispatch.

Validation

• The Council check passes 39 test files and 1,126 tests.
• OpenSpec strict validation passes all 31 packages.
• The full local release gate passes 708 Bats tests, shell checks, formal
  checks, install smoke tests, documentation checks, dependency checks, and
  repository hygiene checks.
• Hosted Linux and Windows release workflows pass.
• Exact-merge Grok, Claude, and Codex canaries return nonce-bound ready
  receipts with completed terminal records, exit code 0, no pending or failed
  tool calls, and empty standard error.
• A cold Codex GPT-5.6 Sol audit approved the implementation with no findings.
• The exact-merge knowledge graph covers 401 source files with 2,781 nodes,
  5,104 edges, 20 hyperedges, and no missing endpoints or self-loops.

Council preserved quorum_not_met for the audited bundle because the cold
audit was not bound to a Council ready token. This advisory shadow result is
not a release rejection. Deterministic Foreman release gates remain the merge
authority.

Scope boundaries

This release does not include Gemini dispatch, npm publication, complete
Council orchestration, or complete Python removal. New executable code follows
the Node.js and TypeScript migration rule.