Getzilla 2.2.1

Getzilla 2.2.1 binds passing independent reviews to the exact source commit inspected by each reviewer. Receipt consumption revalidates that binding. Missing legacy bindings and unreviewed source changes are refused.

Grok skills now come from canonical sources through the harness generator. Installed-consumer parity and safe retirement are checked. Conventional global review reports and low-risk micro routes without a package remain supported; malformed selected metadata and missing durable packages fail closed.

Fresh-agent handoff now identifies Getzilla and separates published source from the release candidate. Local owner overrides must record their scope, deferred checks and later verification. They do not replace external checks or grant production authority.

Recovery: obtain fresh independent reviews for legacy unbound PASS receipts. For a regression, use the prior immutable v2.2.0 source in a fresh isolated installation; do not overwrite an existing consumer or reuse stale receipts.

The attached ZIP and SHA-256 file identify the exact merged release source. Installation and source checks qualify the recorded source only. No unspecified production installation, unattended factory runner or autonomous business task is certified by this release.

Release source: merged commit 05f85f12b72b3a897c45c24e172fac8317120b7c, tree ea0e67c678c90764196dadce09910954d6be0371. The full local PR suite passed on the identical tree at 89b131e7b20afeafc02bf859131e449fa618c702; that evidence is reused with its original identity, not claimed as a fresh merged-commit run.

ZIP SHA-256: 0eb872f02f96f246965004637c2c1d6b32cadb988b6c84513a55b251f7fefc68. Two fresh merged-source builds matched; CRC, manifest, 640 installed-file hashes, harness parity, doctor and overwrite refusal checks passed.