judgment-pack v0.39.0-alpha.2

v0.39.0-alpha.2

This scoped prerelease adds the selected retained-column/1 document-validation
leaf from the official immutable Spec v0.3.0-rc.2 distribution
for Agent v0.11.0 integration. It supports Base and Extended document validation
and declared pack inventory coverage. It does not complete the final v0.39.0
milestone or establish final Core conformance.

The installed leaf has this exact identity:

• Source: bcac15b7537ce21879201b5e5dfe795496225121.
• Schema: sha256:0cb49f238c78391cb163a65474cc9af962df2bb1024a55c5310c2b784b2f0557.
• Corpus: sha256:17b16ff7a9b74fe4cc81eb6f6129a6aabdd9834621d9e756aa2d4c1a3f245863.
• Archive: sha256:0762a27d68492bcc2313872b7ae566e8b3cd65f3a45e02d596cb686259f3cb61.
• Inventory: sha256:b4d62b3259b24dee68d926750ab45247d974004eec2bd15814f7d24c89140160.
• Independent provenance: sha256:a13a5c76ef3e010b31266d0fd779450ba985c41df779280a3da42c3a79acdfd4.

Automation using the historical Draft selector must replace it with
retained-column/1@bcac15b7537ce21879201b5e5dfe795496225121. The compatibility
flag names remain --draft-contract and --draft-profile; both are required,
with profile base or extended. MCP callers use the corresponding
draftContract and draftProfile fields. Historical Draft selection refuses;
the historical fixtures retain their original pins. Ordinary dialect operations
keep their existing defaults. See the selected reader and API details.

Selected reports name the published Spec source and maturity draft. Every
selected operation verifies the installed identity and byte inventory before
artifact admission. The maintainer importer accepts Git's single bounded leading
source-comment PAX header while retaining archive pin, member, path, source-byte
and expanded-byte safeguards.

Asserted retained values remain bounded at 16000 UTF-8 bytes; generated values
admit up to 524288. Both bounds stay fixed in Base and Extended. Document/frame,
parser, transport and source-snapshot limits retain their separate contracts;
a maximum frame value does not imply that it fits inside a complete source snapshot.
Original raw document/frame bytes and digests, bounded frame summary, all five
conversion kinds and eight original types remain inspectable.

Validation covers all 72 published conversion cases for structural admission and
raw provenance, plus all 11 published raw-value recipes through Go, CLI and MCP
in both profiles. This reader executes no conversions or preview arithmetic and
makes no producer authenticity, history, preparation/export verification or
full-chain Desk cutover claim. Published synthetic fixtures retain their
preparation-only identities. Core and Policy locks and the general registry
remain independent; Runtime's conformance claim is stated in
CONFORMANCE.md.

Pin this exact prerelease when testing the integration; its interfaces may change
before the final release. Signed-tag, immutable-release, checksum, attestation and
native distribution requirements remain defined by the
release procedure.

What's Changed

• Re-vendor the devkit scripts at v0.8.0 by @kikashy in #333
• CI: run the checks a pull request's changed paths map to (jpdev.json mapping) by @kikashy in #334
• Re-vendor the devkit scripts at v0.9.0 by @kikashy in #335
• Re-vendor the devkit scripts at v0.10.0 by @kikashy in #336
• Add explicit retained-column Draft document validation by @kikashy in #337
• Adopt published retained-column RC2 for selected document validation by @kikashy in #338

Full Changelog: v0.39.0-alpha.1...v0.39.0-alpha.2