Open Nova v1.0.1

Open Nova v1.0.1

Open Nova v1.0.1 supersedes the withdrawn, immutable v1.0.0 release.

What changed

• Managed Dashboard, watchdog, nova-RAG, and Scheduler jobs are normalized to
  stable Runtime source and venv pointers during update.
• Fresh installs and full upgrades now publish store-confined relative source
  and venv pointers for the same release generation, with exact transactional
  rollback of legacy pointer forms.
• Dashboard and nova-RAG health provenance must match the candidate's exact
  full source commit before an update can commit.
• Update selection fails closed for a Release explicitly marked WITHDRAWN,
  as well as draft, prerelease, missing, malformed, rate-limited, abbreviated,
  symbolic, and non-commit selections.

Release assurance

• Two independent frozen-source suites: 1,419 run / 0 failures / 0 errors /
  2 expected skips per run.
• Public source aggregate SHA-256:
  f7cb5d6d76bcd3b2468878004fa0a83b31d721795b57b91bc62641f64aba913e
• Runtime payload aggregate SHA-256:
  7ecf60b8ea6dca7bc21a37eaae0672e47ca6df037aeb2f0b14cdde6dec062ef2

Verify downloaded assets with:

shasum -a 256 -c SHA256SUMS

See the changelog
and release assurance
for details.

Open Nova v1.0.x is macOS-first. Linux and Windows are not first-class
one-liner targets in this release line.