v1.38.0 — Who decided

Each owner decision now records who made it.

• The login behind each decision. The console keeps the email from the Access token it already verifies, for each answer, lock, message and withdraw/keep/confirm. It lives beside the store (operators.jsonl, 0600); the store itself is unchanged, so an older kit still starts on it. Agent writes, scheduled triggers and service tokens keep none.
• The Feed shows it: "by alice@example.com". Agents never see emails.
• Nothing personal in your repository. Committed ruling files carry only a short name you set:
  agent.py --state STATE operator-name alice@example.com alice.
  The next export then adds locked_by_name to that login's locks. With no name set, exports are unchanged.

See CHANGELOG.md "Who decided (1.38.0)".

Zip sha256: c0a2422aa30e9759c933b9aec93b34ce58f1b6b3768fec0e5fa08969b8e29e8e