judgment-pack-desk v0.13.1

Desk v0.13.1

Desk adopts the independently published official Policy draft
policy-v1.0.0-draft.1
through its shared Runtime check boundary. Fresh adoption preparation and review
select format 1.0.0, draft maturity, and
spec/policy.md at 0799b37b74e35c4a86bfbf70f7bee80bdb7bbe94
with exact published capabilities and complete result validation.

Pre-publication candidate reports remain inspectable historical evidence under
their original exact contract. Legacy prototype 0.0.2 coverage remains
supported. Existing documents, approvals, Jobs, registrations and grants are
preserved without conversion, enrollment, migration or automatic replay. Fresh
preparation and approval require the official draft check. An unsupported or
outdated Runtime keeps saved selections/history available and identifies the
required Runtime support.

Offline draft checks bind exact supplied bytes, anchors and scoped references.
They do not establish semantic Policy correctness, IAM, current source authority
or admission permission. Existing manual admission, exact frozen release/runtime,
lifecycle, custody, signer and witness gates remain separate. Runner v0.24.0,
Gateway v0.21.0 and harness v0.1.0 are unchanged.

The one actionable Runtime message is available in English and all 11 existing
translated locales. Strict catalogue checks pass at 6,793 messages per locale;
these model-authored translations have not received native-speaker validation.

The local follow-up steps are recorded in the
Policy smoke checklist. The deferred
50-candidate live research pilot and manual adjudication remain tracked by
#369; live
research quality remains unverified.

The component lock selects published
Runtime v0.37.0
at source bde356c084c1e7786e0a6c327addcd16ec856ebc, signed tag object
fbbda74b1f645eb1cc980a79fee64e9c01f4fae2. Runtime release 417727764 was
published immutably on 2026-10-19; published readback retained the exact seven
reviewed asset identities, sizes and digests, including all six platform
archives and their checksum manifest.

Focused Go adoption/fault checks, the six adoption-client checks and strict
localization checks passed locally. Required Desk CI and bounded native
acceptance gate publication. CI requires actual published Runtime official draft
and legacy coverage tests to run and pass, retaining the existing admission,
signer and witness gates. Custody-dependent manual/recovery checks require the
normal host or CI environment; local sandbox results do not establish their pass.
The native follow-up covers fresh official checks, legacy historical evidence,
recovery and the actionable Runtime message; unrelated earlier workflow evidence
retains its original scope.

Platforms

This release contains complete Linux/amd64, macOS Apple Silicon (arm64), and
macOS Intel (amd64) archives. All three archives were built and smoke-tested on
native GitHub-hosted runners before publication; neither macOS archive is merely
cross-compiled. Component versions come from the same release lock.

macOS executables are not Developer ID signed or notarized. Gatekeeper may block
downloaded executables; verify the release and checksums, then use Apple's
Privacy & Security → Open Anyway procedure
for the blocked executable. Native CI does not exercise these dialogs. The Codex
subscription subprocess bridge remains Linux-only.

No Windows archive is published. Windows execution is untested, and the managed
installer supports only Linux and macOS.