v1.0.0-alpha.7

Fixed

• Treat Hermes module help probes as read-only diagnostics instead of high-risk unknown execution.
• Serialize evidence ledger appends so concurrent replay checks cannot race on seq or prev_hash.

Evidence

• .venv/bin/python -m pytest: 292 passed.
• ruff clean.
• Hermes R13 segmented dogfood: 21/21 pass, host-tool fall-through 0, proxy secret findings 0, chain_ok=true.

Note

• OpenClaw remains blocked on a real pinned host before any 95% control claim.