v0.87.0

What's Changed

• ci: stage frozen Go27 bridge authority by @intel352 in #1024
• ci: adopt frozen Go27 policy bridge by @intel352 in #1025
• test(wfctl): reuse immutable fixture builds per invocation by @intel352 in #1033
• fix(ui): pin patched source-map-js resolution by @intel352 in #1035
• ci: stage benchmark authority and patch fixture x/text by @intel352 in #1038
• ci: adopt strict benchmark collector and quiet Saga logging by @intel352 in #1039
• ci: promote the realized Go 1.27 bridge authority by @intel352 in #1040
• Stage canonical Go 1.27.2 policy authority by @intel352 in #1045
• ci: adopt staged Go1.27.2 policy compiler by @intel352 in #1046
• ci: promote realized Go1.27.2 policy authority by @intel352 in #1048
• ci: stage frozen classifier capability authority by @intel352 in #1049
• build(deps): bump github.com/santhosh-tekuri/jsonschema/v6 from 6.0.2 to 6.0.3 by @dependabot[bot] in #1028
• build(deps): bump github.com/GoCodeAlone/modular/modules/eventbus/v2 from 2.10.0 to 2.12.0 by @dependabot[bot] in #1032
• build(deps): bump the npm_and_yarn group across 1 directory with 8 updates by @dependabot[bot] in #1026
• test: compress conformance fixture archives at best speed by @intel352 in #1034
• fix(auth): enforce configured JWT issuer and audience by @intel352 in #1042
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.47.0 in the go_modules group across 1 directory by @dependabot[bot] in #1051
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.47.0 in /example in the go_modules group across 1 directory by @dependabot[bot] in #1050
• build(deps): bump github.com/alicebob/miniredis/v2 from 2.38.0 to 2.39.0 by @dependabot[bot] in #1030
• fix(ci): align example and capability fixture dependency metadata by @intel352 in #1053
• fix(ci): adopt frozen policy capability and repair fetch fixture event environment by @intel352 in #1052
• fix(ci): promote realized policy capability authority by @intel352 in #1054
• fix(ci): correct unused staged audit executable hash by @intel352 in #1055
• fix(ci): correct unused portable audit executable hash by @intel352 in #1057
• ci: adopt Kubernetes boundary audit and mutation checks by @intel352 in #1056
• fix(ci): promote accepted capability audit authority by @intel352 in #1058
• fix(wfctl): wait for valid helper PID in SIGKILL fixture by @intel352 in #1059
• ci: stage complete Go1.27.2 workflow wave by @intel352 in #1060
• fix(lsp): preserve hover Markdown under lint 2.14 by @intel352 in #1062
• ci: adopt Go 1.27.2 and verify native fixture compilers by @intel352 in #1061
• ci: promote complete Go 1.27.2 workflow wave by @intel352 in #1063
• ci: stage isolated policy Go 1.27.2 floor by @intel352 in #1064
• fix(wfctl): retain safe failure evidence for record-host tests by @intel352 in #1065
• ci: stage native test package budget context by @intel352 in #1068
• ci: validate equivalent staged native test budgets by @intel352 in #1070
• ci: adopt native test budget with preserved policy mutations by @intel352 in #1069
• fix(wfctl): preserve Docker resolver failure evidence by @intel352 in #1067
• ci: adopt staged policy Go 1.27.2 floor by @intel352 in #1066
• ci: promote realized Go policy authority floor by @intel352 in #1071
• fix(wfctl): bound Docker daemon identity requests by @intel352 in #1072
• ci: promote realized native test budget context by @intel352 in #1073
• test: make SQLite cross-context lock regression deterministic by @intel352 in #1074
• fix: update Workflow toolchains and generated runtime boundaries by @intel352 in #1022
• ci: stage matching snapshot test budget by @intel352 in #1075
• ci: match snapshot test budget to native CI by @intel352 in #1076
• ci: promote matching snapshot test budget by @intel352 in #1077
• fix: keep generated release outputs out of VCS dirtiness by @intel352 in #1078
• Add portable Workflow assistant example by @intel352 in #1083
• fix: enforce MCP tool contracts and effect annotations by @intel352 in #1084
• fix(mcp): support July 2026 while preserving legacy stdio by @intel352 in #1085

Full Changelog: v0.86.2...v0.87.0