v0.8.2

What's Changed

• S130: post-re-cut truth-sync — docs reflect the SIGNED v0.8.1 binaries by @Navigata1 in #379
• docs: add W-REBUILD foundation-rebuild workstream pack by @Navigata1 in #380
• S131–S134: fleet source-of-truth consolidation (docs/report-only) by @Navigata1 in #382
• Reassessment infusion: W-REBUILD spec amendments + FCP/RFC-template completion + synthesis queue (docs-only) by @Navigata1 in #383
• RB-0a: xtask truth — machine-truth generator + marker stamping + --check drift guard by @Navigata1 in #384
• RB-0b: README replacement — verified front door (172 lines), walkthroughs to docs/internals/ by @Navigata1 in #385
• RB-0c: version-narrative fixes — stale strings to zero on public surfaces by @Navigata1 in #386
• RB-0d: site stats stamped from truth.json + 0.8.1 VSIX prepared + @caps blog draft by @Navigata1 in #387
• RB-1: caps lattice → CapSet(u16) bitset — XOR diff delta, differential-proven, diff-caps --machine by @Navigata1 in #388
• RB-2: crash-surface sweep — deny(unwrap/expect), MIN/-1 abort → cross-backend diagnostic, corpus smoke + fuzz by @Navigata1 in #389
• RB-2 follow-up: interp %= 0 → "division by zero" — cross-backend parity arm + parity test by @Navigata1 in #390
• Studio suite UX overhaul: version truth, splash, simple/power modes, process discipline, live truth tiles by @Navigata1 in #391
• docs: Studio suite handoff - macOS parity standard, agent-legibility, Co-typist design + Codex brief by @Navigata1 in #392
• RB-3: registry-derived dispatch — PrimMeta Binding/Guard columns, #[garnet_primitive] adapter table, 82 hand-written registrations deleted by @Navigata1 in #393
• docs: W-REBUILD RB-band stop report — RB-1..RB-3 landed, nine decisions queued for Jon by @Navigata1 in #394
• docs: MacBook Pro fleet report refresh — W-REBUILD RB-band completion by @Navigata1 in #395
• Studio macOS: PR #391 standard parity (rows 1-9) + 19-agent judged enhancement set by @Navigata1 in #396
• RB-4a: rowan unification — legacy #221 CST oracle deleted, token parity re-anchored on the lexer, all-corpus parse gate restored by @Navigata1 in #397
• fix: re-anchor MIT readiness distribution-lane test pins to post-#364 re-sealed committed evidence by @Navigata1 in #398
• RB-4b.1: substrate fidelity — cst_to_ast span-exact + error-verdict-equal with parse_source by @Navigata1 in #400
• docs: prepare S114 independent re-verification package by @Navigata1 in #399
• docs: resolve the nine W-REBUILD stop-report rulings + RFC-0002 integer-overflow policy by @Navigata1 in #401
• RB-4b.2 (re-scoped): SyntaxError carries a token-range span + the LSP single-parse finding by @Navigata1 in #402
• RB-4b.3: per-pass caps re-check on VM lowering (Directive 7, GHC-Core pattern) by @Navigata1 in #403
• RB-4b.4: editions note + spec reconciliation (W-REBUILD Foundation, docs-only) by @Navigata1 in #404
• RB-5: environment rebuild STOP+REPORT — measured baseline + indexed-frame blocker (decision for Jon) by @Navigata1 in #405
• RB-6: backend/IR decision memo (DRAFT) + RB-5 sequencing decision (decision for Jon) by @Navigata1 in #406
• RB-7: the REPL joy slice — reedline line editing + ?doc/:caps + pretty values by @Navigata1 in #407
• W-REBUILD: final workstream report — Foundation band (RB-0..RB-7) closeout by @Navigata1 in #408
• PR-1: truth-gate fail-closed + examples-gate green (Foundation Tier-0) by @Navigata1 in #409
• PR-2: test-runner entry-authority parity (Foundation Tier-0) by @Navigata1 in #410
• PR-3: VM⇄interpreter block-local scope parity (Foundation Tier-0) by @Navigata1 in #411
• fix: checked +/-/*/unary-neg integer overflow on both backends (RFC-0002) by @Navigata1 in #413
• PR-4: capability callable-identity unification (Foundation Tier-0) by @Navigata1 in #412
• fix: process-abort firewall on eval/repl/test/doctest lanes (J8) by @Navigata1 in #414
• fix: cycle/depth guard in Value::display/debug (firewall follow-up) by @Navigata1 in #415
• chore(release): fail-closed signing + drop silent main-fallback [PREPARED, Jon-gated — do not auto-merge] by @Navigata1 in #416
• ci: wire xtask truth --check drift guard [PREPARED, Jon-gated — do not auto-merge] by @Navigata1 in #417
• docs(s114): rich HTML independent-verification dossier (engineered Codex+Opus handoff) by @Navigata1 in #419
• Fix S114 load-time caps and max-depth gates by @Navigata1 in #420
• fix(caps): deny-by-default capability mediation — close S114 residual fail-open lanes [Jon-gated] by @Navigata1 in #421
• WV-4: Playwright Studio-UI harness — make the Studio UI browser-testable by @Navigata1 in #422
• docs(studio): record WV-4 Playwright harness + desktop-drive follow-up in CHANGELOG; repoint config header by @Navigata1 in #423
• fix(caps): @max_depth load-time validation completeness — impl methods + nested modules [Jon-gated] by @Navigata1 in #424
• fix(docs): prevent playground mobile overflow by @Navigata1 in #425
• feat(studio): add Windows bootstrap assistant by @Navigata1 in #426
• feat(studio): typed GUI bootstrap runner — run setup steps from CLI Health (Phase 0) by @Navigata1 in #427
• chore(studio): Phase 1 dead-weight cleanup — remove Taxonomy UI + redundant evidence button; relabel Advisory by @Navigata1 in #428
• feat(studio): Diff-Caps Review Gate — render diff-caps --machine verdict (Phase 2) by @Navigata1 in #429
• feat(studio): Velocity Editor — live check --format json diagnostics (Phase 3) by @Navigata1 in #430
• feat(studio): Enforced / Declared Legend — generated from CLI/source truth (Phase 4) by @Navigata1 in #431
• feat(studio): Agent-Loop Console — render --record-dir dossier as a 4-gate pipeline (Phase 5) by @Navigata1 in #432
• docs(studio): Studio Windows redesign completion dossier (Phases 0–5) by @Navigata1 in #433
• docs(studio): macOS Studio parity & beyond — 7-pass-audited plan of attack dossier by @Navigata1 in #434
• test(caps): A1 — element-6 mechanical invariants (surface == enforcement) [Jon-gated] by @Navigata1 in #435
• fix(caps): A5 — make deny-by-default a one-way latch [Jon-gated] by @Navigata1 in #437
• ci(caps): A2 — wire the S114 trust-kernel anti-rot gates into CI [Jon-gated] by @Navigata1 in #436
• docs(s114): A6 — CURRENT_STATE → independently-re-verified-with-fixes [Jon-gated] by @Navigata1 in #438
• ci(studio): M0a — real macOS Studio CI gate (swift build/test + contract) [Jon-gated] by @IslandDevCrew in #439
• feat(studio): M0b — diff-caps render bridge (decoder + pure projection) [Jon-gated] by @IslandDevCrew in #440
• fix(studio): M1 — honesty-cleanup parity (relabel converter overclaim + guard) [Jon-gated] by @IslandDevCrew in #441
• feat(studio): M2 — Diff-Caps Review Gate panel (machine verdict verbatim) [Jon-gated] by @IslandDevCrew in #442
• feat(studio): M3 — Velocity Editor (live check --format json, cwd-isolated) by @IslandDevCrew in #443
• feat(studio): M4 — Enforced/Declared Legend (catalog + live static-gate probe) by @IslandDevCrew in #444
• feat(studio): M5 — Agent-Loop Console (4-gate pipeline, verdict verbatim) by @IslandDevCrew in #445
• feat(studio): M6 — Bootstrap (generate allowlisted scripts only; no spawn) by @IslandDevCrew in #446
• feat(studio): M7 — Distribution Reporter (honest macOS packaging/notarization) by @IslandDevCrew in #447
• docs(studio): M8 — Foundation + macOS Studio parity completion dossier (capstone) by @IslandDevCrew in #448
• proof(seccomp): re-verify seccomp-apply on native ARM64 vs current main (Linux lane L1) by @IslandDevCrew in #449
• proof(cli): native ARM64 Debian .deb clean-install smoke (Linux lane L2) by @IslandDevCrew in #450
• feat(studio): native ARM64 Linux build+install+launch of the Tauri Studio (Linux lane L3) by @IslandDevCrew in #451
• docs(linux): native Linux lane completion dossier (capstone, L4) by @IslandDevCrew in #452
• fix: restore current Rust security and Clippy gates by @Navigata1 in #455
• docs: define evidence-first launch convergence by @Navigata1 in #454
• docs: harden launch-ledger evidence plan by @Navigata1 in #457
• docs(site): publish the WHY case for existence at /why.html by @IslandDevCrew in #459
• fix(readiness): consume native Linux completion proof by @Navigata1 in #458
• docs(site): /why v1.1 — Vercel Zero panel + verified convergence figures by @Navigata1 in #460
• docs: add Garnet Fable-safe prompt pack by @Navigata1 in #453
• feat(readiness): canonical machine-readable launch ledger (Truth Lock Task 3) by @Navigata1 in #461
• docs: reconcile launch-critical runtime contracts (Truth Lock Task 4) by @Navigata1 in #462
• docs(truth): refresh launch baseline measurement (Truth Lock Task 5) by @Navigata1 in #463
• W-PLAY Task 1: Garnet runs in WebAssembly — garnet-wasm crate + additive output capture by @Navigata1 in #464
• docs(site): 'Why — The Skinny' button routes the #why section to the full /why page by @Navigata1 in #465
• WV-1: entry-authority probe confirmed on Windows — sealed proof bundle + Gate-1 row by @IslandDevCrew in #466
• WV-2: VM<->interp scope-parity probe confirmed on Windows — sealed proof bundle + Gate-1 row by @IslandDevCrew in #467
• WV-3: truth-gate + verify examples green AND fail-closed on Windows — sealed proof bundle + Gate-1 row by @IslandDevCrew in #468
• Gate-1 report: Windows leg confirmed — probe-4 sealed + RB-1 cited; all five HIGH probes green on Windows by @IslandDevCrew in #469
• WV-5: wasm lane builds + executes from a clean Windows checkout — sealed proof bundle by @IslandDevCrew in #470
• docs(why): publish bounded Gate 1 claim upgrades by @IslandDevCrew in #471
• ops(mission): bootstrap S114 closure mission by @IslandDevCrew in #472
• P0: record scoped S114 acceptance; reporter reads it; machine-independent ledger by @IslandDevCrew in #473
• P1: land recovered S114 independent evidence durably (gc-proof + gate-enforced) by @IslandDevCrew in #474
• P2: capability enforcement scope table; bound runtime overclaims; claim fixture by @IslandDevCrew in #475
• P3a: CLI authority lanes fail closed (dep preload + test helper) by @IslandDevCrew in #476
• P3b: embedder strict-by-default with explicit permissive opt-out by @IslandDevCrew in #477
• P4-T1: rolling S114 trust-kernel review control (machine-readable) by @IslandDevCrew in #478
• ops(mission): S114 Closure & Hardening complete by @IslandDevCrew in #480
• P4-T2 [Jon-gated]: wire S114 capability-scope + trust-kernel review gates into CI by @IslandDevCrew in #479
• P5: foundation hygiene — FAQ MSRV truth, converter dialect note, wasm 1.97 verification by @IslandDevCrew in #482
• P5-T5: /why reconciliation — audited upgrade never shipped; corpus-of-record corrections by @IslandDevCrew in #484
• P6: /why upgrade — placeholder cards completed from verified primary sources by @IslandDevCrew in #485
• P5-T1 [Jon-gated]: extend supply-chain scans to Studio + fuzz lockfiles by @IslandDevCrew in #481
• gate fix [Jon-gated]: dogfood PR-body checker skipped .github/ paths (lstrip char-set bug) by @IslandDevCrew in #483
• ops(mission): S114 Closure & Hardening — mission complete by @IslandDevCrew in #486
• docs(truth): reconcile S114 acceptance and Wasm evidence by @IslandDevCrew in #487
• ci(governance): make all 31 required contexts executable [Jon-gated] by @IslandDevCrew in #488
• governance: record live 31-check baseline [Jon-gated] by @IslandDevCrew in #489
• governance: add strict required-context contract [Jon-gated] by @IslandDevCrew in #490
• governance: add immutable workflow snapshot boundary [Jon-gated] by @IslandDevCrew in #491
• Add typed workflow YAML boundary by @IslandDevCrew in #492
• Add fail-closed workflow schema projection by @IslandDevCrew in #493
• Add exact required-context availability evaluator by @IslandDevCrew in #494
• Bind required-context inventory to preactivation ruleset by @IslandDevCrew in #495
• Add offline required-context workflow/App identity graph by @IslandDevCrew in #496
• docs: add launch-preparation state of the union by @Navigata1 in #497
• Add Wasm check and capability-diff adapters by @Navigata1 in #498
• Add authenticated bounded GitHub object transport by @Navigata1 in #500
• Validate MCP 2025-11-25 initialize schema by @IslandDevCrew in #501
• Parse strict GitHub Link response headers by @IslandDevCrew in #502
• feat(mcp): add fail-closed Minimum Shelf lifecycle core by @IslandDevCrew in #503
• test(mcp): harden Minimum Shelf lifecycle adversarially by @IslandDevCrew in #504
• build(wasm): add hermetic playground package probe by @IslandDevCrew in #505
• feat(governance): collect complete bounded GitHub pages by @IslandDevCrew in #506
• Open parallel launch-convergence mission by @Navigata1 in #499
• ops(lane0): freeze launch truth and reconciliation backlog by @Navigata1 in #507
• fix(lane0): make closeout proof squash-durable by @Navigata1 in #508
• feat(playground): close W-PLAY with reproducible browser proof by @Navigata1 in #509
• fix(lane0): make evidence proofs clone-durable by @Navigata1 in #510
• feat(lane2b): ship minimum sealed Shelf and MCP host by @Navigata1 in #514
• ci(governance): prepare linear Lane 1 activation boundary by @Navigata1 in #517
• trust(lane1): Phase 0 post-activation reconciliation — landed markers, WV-6 re-acceptance, U-31/U-35 cures, honest denominators by @Navigata1 in #518
• docs(lane2b): close post-merge mission state by @Navigata1 in #516
• WV-6 terminal freeze: gate-topology amendment, third merge, and re-acceptance (Verdicts 02/03/GT-01 + terminal confirmation) by @Navigata1 in #521
• proof(wv6): terminal freeze 3 post-squash re-acceptance by @IslandDevCrew in #523
• Gate topology: record credential-lifecycle finding by @Navigata1 in #522
• fix(governance): cure U-17 projection and reaccept WV-6 by @IslandDevCrew in #524
• governance: terminal Freeze-7 ruleset field 2 and carried cures by @IslandDevCrew in #528
• fix(wv): align current-repository WV-6 expectation with post-squash truth by @IslandDevCrew in #531
• docs(trust): L1 re-acceptance redesign brief and cross-family review record by @IslandDevCrew in #530
• records(l2): August 2026 arc register sweep at 0607f7f by @Navigata1 in #529
• records(l2): landing-arc register sweep at 7f77c0d by @Navigata1 in #532
• L3: cure U-39 base-controlled adapter identity by @IslandDevCrew in #533
• docs(l5): align public truth and CRA positioning by @IslandDevCrew in #534
• records(l1): DECISION POINTS ruling — commission the succession-law implementation by @IslandDevCrew in #535
• fix(dogfood): honor evidence heading document order (U-62) by @IslandDevCrew in #536
• docs(truth): bound two use-case claims to the enforced set (L6) by @IslandDevCrew in #537
• L1: define acceptance succession contract law (act 1/5) by @IslandDevCrew in #538
• docs(truth): scope the four remaining universals to the registered surface (L6) by @IslandDevCrew in #539
• records(l2): landing-arc-2 register sweep at 080da69 by @IslandDevCrew in #541
• docs(cra): render the U-32 and U-33 citations as anchors by @IslandDevCrew in #542
• docs(security): align SECURITY.md with v0.8.1 truth by @IslandDevCrew in #544
• site(front-door): replace the June index with the evidence front door by @IslandDevCrew in #545
• records(l2): landing-arc-3 register sweep at 76b6a34 by @IslandDevCrew in #546
• ci(release): pin softprops/action-gh-release to v3.0.3 (Node 24 action) by @IslandDevCrew in #543
• policy(deny): remove the inert arrayref@0.3.9 yank exception (DP7 precondition) by @IslandDevCrew in #540
• site(omarchy): the Garnet × Omarchy union page on its one real seam by @IslandDevCrew in #547
• records(l2): landing-arc-4 register sweep (U-91…U-116) by @IslandDevCrew in #557
• records(l2): amend U-92 — the divergence is bounded by native lowering, not by the checker's verdict by @IslandDevCrew in #560
• caps(runtime): bound gated primitives by the entry point's declared budget (U-91) by @IslandDevCrew in #556
• manifest(verify): compare every field and refuse unknown keys (crown C B-2, B-3) by @IslandDevCrew in #554
• records(l2): landing-arc-5 register sweep (U-117…U-121) by @IslandDevCrew in #561
• gate(dogfood): close the section boundary, require evidence tokens, bound the git subprocess by @IslandDevCrew in #551
• truth(caps): bound the check-time guarantee to named call chains (U-91, U-92) by @IslandDevCrew in #564
• site(front-door): restore the language site and seat the September hero on it by @Navigata1 in #566
• site(front-door): close the round-two review of #566 by @Navigata1 in #567
• release(0.8.2): bump the workspace version, consolidate the ledger, rebuild W-PLAY, reseal the Shelf by @Navigata1 in #568
• caps(gate): stop hiding declared authority under vendor and disclose skipped paths (crown C B-1) by @IslandDevCrew in #555
• site(front-door): a code tab panel with nothing focusable takes keyboard focus by @Navigata1 in #569
• docs: say plainly that source is 0.8.2 and the last signed release is v0.8.1 by @Navigata1 in #570
• trust(wv): read acceptance evidence once by descriptor and reject non-LF bytes (crown D-2) by @IslandDevCrew in #552
• trust(gate): version the surface and cover the capability walk, manifest verifier and dogfood checker (U-116) by @IslandDevCrew in #559
• release: build Linux ARM64, Linux tarballs and a Windows zip; add install.ps1 by @IslandDevCrew in #571
• site(playground): a runtime that fails to load says so; presets load alongside it by @IslandDevCrew in #572
• release(0.8.2): make the shipped text match the binary before the tag by @IslandDevCrew in #573
• security(0.8.2): network policy judges IPv4 inside IPv6; keygen keeps the key private by @IslandDevCrew in #574

Full Changelog: v0.8.1...v0.8.2

What's Changed

• S130: post-re-cut truth-sync — docs reflect the SIGNED v0.8.1 binaries by @Navigata1 in #379
• docs: add W-REBUILD foundation-rebuild workstream pack by @Navigata1 in #380
• S131–S134: fleet source-of-truth consolidation (docs/report-only) by @Navigata1 in #382
• Reassessment infusion: W-REBUILD spec amendments + FCP/RFC-template completion + synthesis queue (docs-only) by @Navigata1 in #383
• RB-0a: xtask truth — machine-truth generator + marker stamping + --check drift guard by @Navigata1 in #384
• RB-0b: README replacement — verified front door (172 lines), walkthroughs to docs/internals/ by @Navigata1 in #385
• RB-0c: version-narrative fixes — stale strings to zero on public surfaces by @Navigata1 in #386
• RB-0d: site stats stamped from truth.json + 0.8.1 VSIX prepared + @caps blog draft by @Navigata1 in #387
• RB-1: caps lattice → CapSet(u16) bitset — XOR diff delta, differential-proven, diff-caps --machine by @Navigata1 in #388
• RB-2: crash-surface sweep — deny(unwrap/expect), MIN/-1 abort → cross-backend diagnostic, corpus smoke + fuzz by @Navigata1 in #389
• RB-2 follow-up: interp %= 0 → "division by zero" — cross-backend parity arm + parity test by @Navigata1 in #390
• Studio suite UX overhaul: version truth, splash, simple/power modes, process discipline, live truth tiles by @Navigata1 in #391
• docs: Studio suite handoff - macOS parity standard, agent-legibility, Co-typist design + Codex brief by @Navigata1 in #392
• RB-3: registry-derived dispatch — PrimMeta Binding/Guard columns, #[garnet_primitive] adapter table, 82 hand-written registrations deleted by @Navigata1 in #393
• docs: W-REBUILD RB-band stop report — RB-1..RB-3 landed, nine decisions queued for Jon by @Navigata1 in #394
• docs: MacBook Pro fleet report refresh — W-REBUILD RB-band completion by @Navigata1 in #395
• Studio macOS: PR #391 standard parity (rows 1-9) + 19-agent judged enhancement set by @Navigata1 in #396
• RB-4a: rowan unification — legacy #221 CST oracle deleted, token parity re-anchored on the lexer, all-corpus parse gate restored by @Navigata1 in #397
• fix: re-anchor MIT readiness distribution-lane test pins to post-#364 re-sealed committed evidence by @Navigata1 in #398
• RB-4b.1: substrate fidelity — cst_to_ast span-exact + error-verdict-equal with parse_source by @Navigata1 in #400
• docs: prepare S114 independent re-verification package by @Navigata1 in #399
• docs: resolve the nine W-REBUILD stop-report rulings + RFC-0002 integer-overflow policy by @Navigata1 in #401
• RB-4b.2 (re-scoped): SyntaxError carries a token-range span + the LSP single-parse finding by @Navigata1 in #402
• RB-4b.3: per-pass caps re-check on VM lowering (Directive 7, GHC-Core pattern) by @Navigata1 in #403
• RB-4b.4: editions note + spec reconciliation (W-REBUILD Foundation, docs-only) by @Navigata1 in #404
• RB-5: environment rebuild STOP+REPORT — measured baseline + indexed-frame blocker (decision for Jon) by @Navigata1 in #405
• RB-6: backend/IR decision memo (DRAFT) + RB-5 sequencing decision (decision for Jon) by @Navigata1 in #406
• RB-7: the REPL joy slice — reedline line editing + ?doc/:caps + pretty values by @Navigata1 in #407
• W-REBUILD: final workstream report — Foundation band (RB-0..RB-7) closeout by @Navigata1 in #408
• PR-1: truth-gate fail-closed + examples-gate green (Foundation Tier-0) by @Navigata1 in #409
• PR-2: test-runner entry-authority parity (Foundation Tier-0) by @Navigata1 in #410
• PR-3: VM⇄interpreter block-local scope parity (Foundation Tier-0) by @Navigata1 in #411
• fix: checked +/-/*/unary-neg integer overflow on both backends (RFC-0002) by @Navigata1 in #413
• PR-4: capability callable-identity unification (Foundation Tier-0) by @Navigata1 in #412
• fix: process-abort firewall on eval/repl/test/doctest lanes (J8) by @Navigata1 in #414
• fix: cycle/depth guard in Value::display/debug (firewall follow-up) by @Navigata1 in #415
• chore(release): fail-closed signing + drop silent main-fallback [PREPARED, Jon-gated — do not auto-merge] by @Navigata1 in #416
• ci: wire xtask truth --check drift guard [PREPARED, Jon-gated — do not auto-merge] by @Navigata1 in #417
• docs(s114): rich HTML independent-verification dossier (engineered Codex+Opus handoff) by @Navigata1 in #419
• Fix S114 load-time caps and max-depth gates by @Navigata1 in #420
• fix(caps): deny-by-default capability mediation — close S114 residual fail-open lanes [Jon-gated] by @Navigata1 in #421
• WV-4: Playwright Studio-UI harness — make the Studio UI browser-testable by @Navigata1 in #422
• docs(studio): record WV-4 Playwright harness + desktop-drive follow-up in CHANGELOG; repoint config header by @Navigata1 in #423
• fix(caps): @max_depth load-time validation completeness — impl methods + nested modules [Jon-gated] by @Navigata1 in #424
• fix(docs): prevent playground mobile overflow by @Navigata1 in #425
• feat(studio): add Windows bootstrap assistant by @Navigata1 in #426
• feat(studio): typed GUI bootstrap runner — run setup steps from CLI Health (Phase 0) by @Navigata1 in #427
• chore(studio): Phase 1 dead-weight cleanup — remove Taxonomy UI + redundant evidence button; relabel Advisory by @Navigata1 in #428
• feat(studio): Diff-Caps Review Gate — render diff-caps --machine verdict (Phase 2) by @Navigata1 in #429
• feat(studio): Velocity Editor — live check --format json diagnostics (Phase 3) by @Navigata1 in #430
• feat(studio): Enforced / Declared Legend — generated from CLI/source truth (Phase 4) by @Navigata1 in #431
• feat(studio): Agent-Loop Console — render --record-dir dossier as a 4-gate pipeline (Phase 5) by @Navigata1 in #432
• docs(studio): Studio Windows redesign completion dossier (Phases 0–5) by @Navigata1 in #433
• docs(studio): macOS Studio parity & beyond — 7-pass-audited plan of attack dossier by @Navigata1 in #434
• test(caps): A1 — element-6 mechanical invariants (surface == enforcement) [Jon-gated] by @Navigata1 in #435
• fix(caps): A5 — make deny-by-default a one-way latch [Jon-gated] by @Navigata1 in #437
• ci(caps): A2 — wire the S114 trust-kernel anti-rot gates into CI [Jon-gated] by @Navigata1 in #436
• docs(s114): A6 — CURRENT_STATE → independently-re-verified-with-fixes [Jon-gated] by @Navigata1 in #438
• ci(studio): M0a — real macOS Studio CI gate (swift build/test + contract) [Jon-gated] by @IslandDevCrew in #439
• feat(studio): M0b — diff-caps render bridge (decoder + pure projection) [Jon-gated] by @IslandDevCrew in #440
• fix(studio): M1 — honesty-cleanup parity (relabel converter overclaim + guard) [Jon-gated] by @IslandDevCrew in #441
• feat(studio): M2 — Diff-Caps Review Gate panel (machine verdict verbatim) [Jon-gated] by @IslandDevCrew in #442
• feat(studio): M3 — Velocity Editor (live check --format json, cwd-isolated) by @IslandDevCrew in #443
• feat(studio): M4 — Enforced/Declared Legend (catalog + live static-gate probe) by @IslandDevCrew in #444
• feat(studio): M5 — Agent-Loop Console (4-gate pipeline, verdict verbatim) by @IslandDevCrew in #445
• feat(studio): M6 — Bootstrap (generate allowlisted scripts only; no spawn) by @IslandDevCrew in #446
• feat(studio): M7 — Distribution Reporter (honest macOS packaging/notarization) by @IslandDevCrew in #447
• docs(studio): M8 — Foundation + macOS Studio parity completion dossier (capstone) by @IslandDevCrew in #448
• proof(seccomp): re-verify seccomp-apply on native ARM64 vs current main (Linux lane L1) by @IslandDevCrew in #449
• proof(cli): native ARM64 Debian .deb clean-install smoke (Linux lane L2) by @IslandDevCrew in #450
• feat(studio): native ARM64 Linux build+install+launch of the Tauri Studio (Linux lane L3) by @IslandDevCrew in #451
• docs(linux): native Linux lane completion dossier (capstone, L4) by @IslandDevCrew in #452
• fix: restore current Rust security and Clippy gates by @Navigata1 in #455
• docs: define evidence-first launch convergence by @Navigata1 in #454
• docs: harden launch-ledger evidence plan by @Navigata1 in #457
• docs(site): publish the WHY case for existence at /why.html by @IslandDevCrew in #459
• fix(readiness): consume native Linux completion proof by @Navigata1 in #458
• docs(site): /why v1.1 — Vercel Zero panel + verified convergence figures by @Navigata1 in #460
• docs: add Garnet Fable-safe prompt pack by @Navigata1 in #453
• feat(readiness): canonical machine-readable launch ledger (Truth Lock Task 3) by @Navigata1 in #461
• docs: reconcile launch-critical runtime contracts (Truth Lock Task 4) by @Navigata1 in #462
• docs(truth): refresh launch baseline measurement (Truth Lock Task 5) by @Navigata1 in #463
• W-PLAY Task 1: Garnet runs in WebAssembly — garnet-wasm crate + additive output capture by @Navigata1 in #464
• docs(site): 'Why — The Skinny' button routes the #why section to the full /why page by @Navigata1 in #465
• WV-1: entry-authority probe confirmed on Windows — sealed proof bundle + Gate-1 row by @IslandDevCrew in #466
• WV-2: VM<->interp scope-parity probe confirmed on Windows — sealed proof bundle + Gate-1 row by @IslandDevCrew in #467
• WV-3: truth-gate + verify examples green AND fail-closed on Windows — sealed proof bundle + Gate-1 row by @IslandDevCrew in #468
• Gate-1 report: Windows leg confirmed — probe-4 sealed + RB-1 cited; all five HIGH probes green on Windows by @IslandDevCrew in #469
• WV-5: wasm lane builds + executes from a clean Windows checkout — sealed proof bundle by @IslandDevCrew in #470
• docs(why): publish bounded Gate 1 claim upgrades by @IslandDevCrew in #471
• ops(mission): bootstrap S114 closure mission by @IslandDevCrew in #472
• P0: record scoped S114 acceptance; reporter reads it; machine-independent ledger by @IslandDevCrew in #473
• P1: land recovered S114 independent evidence durably (gc-proof + gate-enforced) by @IslandDevCrew in #474
• P2: capability enforcement scope table; bound runtime overclaims; claim fixture by @IslandDevCrew in #475
• P3a: CLI authority lanes fail closed (dep preload + test helper) by @IslandDevCrew in #476
• P3b: embedder strict-by-default with explicit permissive opt-out by @IslandDevCrew in #477
• P4-T1: rolling S114 trust-kernel review control (machine-readable) by @IslandDevCrew in #478
• ops(mission): S114 Closure & Hardening complete by @IslandDevCrew in #480
• P4-T2 [Jon-gated]: wire S114 capability-scope + trust-kernel review gates into CI by @IslandDevCrew in #479
• P5: foundation hygiene — FAQ MSRV truth, converter dialect note, wasm 1.97 verification by @IslandDevCrew in #482
• P5-T5: /why reconciliation — audited upgrade never shipped; corpus-of-record corrections by @IslandDevCrew in #484
• P6: /why upgrade — placeholder cards completed from verified primary sources by @IslandDevCrew in #485
• P5-T1 [Jon-gated]: extend supply-chain scans to Studio + fuzz lockfiles by @IslandDevCrew in #481
• gate fix [Jon-gated]: dogfood PR-body checker skipped .github/ paths (lstrip char-set bug) by @IslandDevCrew in #483
• ops(mission): S114 Closure & Hardening — mission complete by @IslandDevCrew in #486
• docs(truth): reconcile S114 acceptance and Wasm evidence by @IslandDevCrew in #487
• ci(governance): make all 31 required contexts executable [Jon-gated] by @IslandDevCrew in #488
• governance: record live 31-check baseline [Jon-gated] by @IslandDevCrew in #489
• governance: add strict required-context contract [Jon-gated] by @IslandDevCrew in #490
• governance: add immutable workflow snapshot boundary [Jon-gated] by @IslandDevCrew in #491
• Add typed workflow YAML boundary by @IslandDevCrew in #492
• Add fail-closed workflow schema projection by @IslandDevCrew in #493
• Add exact required-context availability evaluator by @IslandDevCrew in #494
• Bind required-context inventory to preactivation ruleset by @IslandDevCrew in #495
• Add offline required-context workflow/App identity graph by @IslandDevCrew in #496
• docs: add launch-preparation state of the union by @Navigata1 in #497
• Add Wasm check and capability-diff adapters by @Navigata1 in #498
• Add authenticated bounded GitHub object transport by @Navigata1 in #500
• Validate MCP 2025-11-25 initialize schema by @IslandDevCrew in #501
• Parse strict GitHub Link response headers by @IslandDevCrew in #502
• feat(mcp): add fail-closed Minimum Shelf lifecycle core by @IslandDevCrew in #503
• test(mcp): harden Minimum Shelf lifecycle adversarially by @IslandDevCrew in #504
• build(wasm): add hermetic playground package probe by @IslandDevCrew in #505
• feat(governance): collect complete bounded GitHub pages by @IslandDevCrew in #506
• Open parallel launch-convergence mission by @Navigata1 in #499
• ops(lane0): freeze launch truth and reconciliation backlog by @Navigata1 in #507
• fix(lane0): make closeout proof squash-durable by @Navigata1 in #508
• feat(playground): close W-PLAY with reproducible browser proof by @Navigata1 in #509
• fix(lane0): make evidence proofs clone-durable by @Navigata1 in #510
• feat(lane2b): ship minimum sealed Shelf and MCP host by @Navigata1 in #514
• ci(governance): prepare linear Lane 1 activation boundary by @Navigata1 in #517
• trust(lane1): Phase 0 post-activation reconciliation — landed markers, WV-6 re-acceptance, U-31/U-35 cures, honest denominators by @Navigata1 in #518
• docs(lane2b): close post-merge mission state by @Navigata1 in #516
• WV-6 terminal freeze: gate-topology amendment, third merge, and re-acceptance (Verdicts 02/03/GT-01 + terminal confirmation) by @Navigata1 in #521
• proof(wv6): terminal freeze 3 post-squash re-acceptance by @IslandDevCrew in #523
• Gate topology: record credential-lifecycle finding by @Navigata1 in #522
• fix(governance): cure U-17 projection and reaccept WV-6 by @IslandDevCrew in #524
• governance: terminal Freeze-7 ruleset field 2 and carried cures by @IslandDevCrew in #528
• fix(wv): align current-repository WV-6 expectation with post-squash truth by @IslandDevCrew in #531
• docs(trust): L1 re-acceptance redesign brief and cross-family review record by @IslandDevCrew in #530
• records(l2): August 2026 arc register sweep at 0607f7f by @Navigata1 in #529
• records(l2): landing-arc register sweep at 7f77c0d by @Navigata1 in #532
• L3: cure U-39 base-controlled adapter identity by @IslandDevCrew in #533
• docs(l5): align public truth and CRA positioning by @IslandDevCrew in #534
• records(l1): DECISION POINTS ruling — commission the succession-law implementation by @IslandDevCrew in #535
• fix(dogfood): honor evidence heading document order (U-62) by @IslandDevCrew in #536
• docs(truth): bound two use-case claims to the enforced set (L6) by @IslandDevCrew in #537
• L1: define acceptance succession contract law (act 1/5) by @IslandDevCrew in #538
• docs(truth): scope the four remaining universals to the registered surface (L6) by @IslandDevCrew in #539
• records(l2): landing-arc-2 register sweep at 080da69 by @IslandDevCrew in #541
• docs(cra): render the U-32 and U-33 citations as anchors by @IslandDevCrew in #542
• docs(security): align SECURITY.md with v0.8.1 truth by @IslandDevCrew in #544
• site(front-door): replace the June index with the evidence front door by @IslandDevCrew in #545
• records(l2): landing-arc-3 register sweep at 76b6a34 by @IslandDevCrew in #546
• ci(release): pin softprops/action-gh-release to v3.0.3 (Node 24 action) by @IslandDevCrew in #543
• policy(deny): remove the inert arrayref@0.3.9 yank exception (DP7 precondition) by @IslandDevCrew in #540
• site(omarchy): the Garnet × Omarchy union page on its one real seam by @IslandDevCrew in #547
• records(l2): landing-arc-4 register sweep (U-91…U-116) by @IslandDevCrew in #557
• records(l2): amend U-92 — the divergence is bounded by native lowering, not by the checker's verdict by @IslandDevCrew in #560
• caps(runtime): bound gated primitives by the entry point's declared budget (U-91) by @IslandDevCrew in #556
• manifest(verify): compare every field and refuse unknown keys (crown C B-2, B-3) by @IslandDevCrew in #554
• records(l2): landing-arc-5 register sweep (U-117…U-121) by @IslandDevCrew in #561
• gate(dogfood): close the section boundary, require evidence tokens, bound the git subprocess by @IslandDevCrew in #551
• truth(caps): bound the check-time guarantee to named call chains (U-91, U-92) by @IslandDevCrew in #564
• site(front-door): restore the language site and seat the September hero on it by @Navigata1 in #566
• site(front-door): close the round-two review of #566 by @Navigata1 in #567
• release(0.8.2): bump the workspace version, consolidate the ledger, rebuild W-PLAY, reseal the Shelf by @Navigata1 in #568
• caps(gate): stop hiding declared authority under vendor and disclose skipped paths (crown C B-1) by @IslandDevCrew in #555
• site(front-door): a code tab panel with nothing focusable takes keyboard focus by @Navigata1 in #569
• docs: say plainly that source is 0.8.2 and the last signed release is v0.8.1 by @Navigata1 in #570
• trust(wv): read acceptance evidence once by descriptor and reject non-LF bytes (crown D-2) by @IslandDevCrew in #552
• trust(gate): version the surface and cover the capability walk, manifest verifier and dogfood checker (U-116) by @IslandDevCrew in #559
• release: build Linux ARM64, Linux tarballs and a Windows zip; add install.ps1 by @IslandDevCrew in #571
• site(playground): a runtime that fails to load says so; presets load alongside it by @IslandDevCrew in #572
• release(0.8.2): make the shipped text match the binary before the tag by @IslandDevCrew in #573
• security(0.8.2): network policy judges IPv4 inside IPv6; keygen keeps the key private by @IslandDevCrew in #574

Full Changelog: v0.8.1...v0.8.2