v0.50.6

Foundation release — not new surface area, but a correctness-and-safety hardening of how Acceptance Criteria are judged and how per-AC execution authority is granted. This release deliberately errs toward stopping (BLOCKED/fail) over forcing an ambiguous state into a false success.

Why this release

A mid-attempt judgment could previously be consumed as if it were a final approval, and a runtime session could be reused across boundaries where it no longer belonged. Both are now closed.

Highlights

Attempt ≠ Acceptance (#1722)

• attempt_judged is now observational only; only acceptance_finalized is a real approval. Intermediate attempt results can no longer be mistaken for final sign-off.

Capsule-bound fresh-session dispatch (#1728)

• Each AC's execution authority is pinned to a capsule fingerprint, verified via dispatch + nonce.
• A new AC always gets a fresh provider session; only recovery of the same attempt is allowed, and only after verification.
• Stale or mismatched runtime handles are fail-closed — no silent reuse of the wrong session.

Net effect

• Fewer misjudgments across restart, duplicate, and concurrency situations.
• Existing event history remains fully readable.
• Not included yet: model routing / escalation — routing behavior is unchanged.

Area	Before	After (this release)
AC judgment	mid-attempt result could be consumed as final approval	attempt_judged observational; only acceptance_finalized approves
Retry / recovery	runtime session could be carried over	new AC → fresh provider session; only same-attempt recovery, after verification
Authority check	runtime-handle centric	capsule fingerprint + dispatch + nonce
Anomalous state	wrong session could be reused	mismatched / stale handles fail-closed
Routing	unchanged	model routing / escalation not yet added

---

What's Changed

• chore(deps): bump softprops/action-gh-release from 3 to 3.0.1 by @dependabot[bot] in #1675
• fix(config): persist stage routing from null profiles by @sergiobuilds in #1711
• docs(changelog): date v0.10.0 orchestration release notes by @sergiobuilds in #1710
• chore(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.2 by @dependabot[bot] in #1676
• feat(orchestrator): establish process-local execution authority by @Q00 in #1715
• test: hermetic isolation + eliminate real agent-CLI spawns + faster CI by @Q00 in #1716
• fix(seed): preserve literal pipes in constraints across both seed paths by @sumin220 in #1714
• feat(orchestrator): separate AC attempts from final acceptance by @Q00 in #1722
• feat(ac): add capsule-bound fresh-session dispatch by @Q00 in #1728

New Contributors

• @sumin220 made their first contribution in #1714

Full Changelog: v0.50.5...v0.50.6