v4.1.2 — Stable

v4.1.2 — Stable

Sol/Luna v4.1.2 is the current Stable release.

Highlights

• Applies least-privilege child-process environment handling.
• Hardens installer path-alias and backup validation.
• Enforces stricter Profile and status validation.

Immutable release identities

• Release commit: bbd1ca397be4970c0de037634e34a077f3b87ed6
• Assisted Installation anchor: a130c676fa5924e44034dc8c27f3dc0abfc3bcad
• Setup anchor: 4b2a6004fb92b6661166cb73e656cc2888b0a2ef
• Source Commit A: 551520c2435aca94d60132f292edbd53cc975cbe

Validation

• Local suite: 357/357 PASS.
• Source exact-SHA CI: run 32717295801, Windows / Ubuntu / macOS PASS.
• Real Global upgrade from v4.1.0-rc6 to v4.1.2: PASS; two owned files changed, one transactional backup created, unrelated configuration preserved.
• Repeated install: CURRENT_INSTALLATION_PASS with zero writes and zero new backups.
• One real compatibility smoke: 169.4 seconds; CLI, Luna capability, selector, delegation, protected state, runtime contract, and overall Compatibility all PASS.
• Final release exact-SHA CI: run 32725249481, Windows / Ubuntu / macOS PASS.

Install

• English README
• 中文 README

v4.1.1 remains the previous immutable Stable release. v4.1.0-rc6 remains an unchanged historical prerelease.

中文摘要

v4.1.2 现为当前稳定版。本次发布完成真实 Global 升级、幂等复验、单次真实 compatibility smoke，以及发布提交 exact-SHA 的 Windows、Ubuntu、macOS CI；公开安装入口固定到独立 immutable Setup 与 Assisted Installation 提交。

v4.1.1 — Stable

v4.1.1 is the current Stable release. It improves the copy-and-paste installation experience while preserving the accepted selector, policy, agents, and config payloads.

Highlights

• Deterministic assisted installation with aggregated prerequisite diagnosis, bounded safe recovery, exact-plan approval for system changes, sanitized support reports, and fail-closed ownership/source gates.
• Explicit Daily selection initialization before a separate one-run fresh-task compatibility smoke.
• Existing valid v4.1.0 installations upgrade by changing only sol-luna-v4/install-manifest.json.
• P3 standalone bootstrap remains intentionally out of scope; Python 3.11+ and Git must exist before the deterministic repository assistant can run.

Install

Use the immutable copy-and-paste prompt in the English README or 中文 README.

• Release commit: 7abb1ef620341e363163e6ba2fbdb7a5e58221fc
• Assisted contract: 17eb1d370929e884f91c5f1920a2e0868ce4a421
• Setup contract: d4a044a04df509285ef38c6afc28b5a68a48a0f9
• Runtime Source Commit A2: ca8e9e4caf5564ffe8d0a11fe376047594f8a748

Validation

• Local repository suite: 332/332 PASS
• Exact-SHA CI: Windows, Ubuntu, and macOS PASS in run 32692226430
• Independent fresh-task compatibility smoke: one run, exit 0, about 144.2 seconds; CLI, Luna capability, Selector, Delegation, Protected state, Runtime contract, and final Compatibility all PASS
• No real Global v4.1.1 installer apply was performed. Historical RC6 runtime evidence remains environment- and scenario-bounded.

History

v4.1.0 remains the previous immutable Stable release. The annotated v4.1.0-rc6 tag and its historical Prerelease remain unchanged.

中文摘要

v4.1.1 现为默认 Stable。请使用中英文 README 中固定到 immutable commit 的安装提示词；安装助手会汇总前置条件、只自动处理有边界的安全修复，任何系统级持久变更仍需明确批准。v4.1.0 与历史 RC6 tag／Release 均保持不变。

v4.1.0 — Stable

v4.1.0 Stable

This release promotes the accepted RC6 product runtime to Stable without changing the selector, Global policy, five Luna agents, managed config, Daily Profile, LKG, or state schema.

Release evidence

• Stable Source Commit A: 67a72f8accc5d53ef04ff8d64d8838e397ceecda.
• Final release commit: f88d297ab909a72534549bcfe70cff2acc9a589a.
• Immutable setup contract: 2c912b1e1a0fdbd115eb605517fde9385b633745.
• Local full suite: 294/294 PASS; tracked Python compilation and diff checks passed.
• Final exact-SHA CI run 32496484585: Windows, Ubuntu, and macOS passed.
• Independent fresh-task compatibility smoke: CLI, Luna capability, Selector, Delegation, Protected state, Runtime contract, and final Compatibility all passed.

Upgrade boundary

An installer-owned RC6→Stable upgrade changes only sol-luna-v4/install-manifest.json. Repository lifecycle coverage verifies dry-run zero writes, transaction backup, second-apply idempotency, exact rollback, downgrade refusal, and ownership-conflict fail-closed behavior. No real Global Stable apply was performed during release certification.

RC6 remains unchanged as a historical GitHub Prerelease / Public Beta. Its bounded real-runtime evidence remains historical and does not imply compatibility across every operating system, Codex client, account, or user environment.

Review and use the immutable setup contract through the default installation entry in the bilingual README.

v4.1.0-rc6 - Public Beta

Note

Historical prerelease. The current Stable release is v4.1.0.
The evidence below records RC6 at its original publication time; its tag and source remain unchanged.

v4.1.0-rc6 - Public Beta

This is a Prerelease / Public Beta. v4.0.0 remains the Stable release.

Fixed source and setup contract

• Installer runtime source: 50ff886d1004ac3dd43b1f4ce531a2a8af8f7a49.
• Immutable RC6 setup-document anchor: 3e19e2f547c6fca2a888a176767e8dc69240acbc.
• The setup anchor identifies the reviewed installation contract; it is not the installer runtime source.

Changes

• Normalizes malformed URL, hostname, and port parsing failures to the selector's controlled SnapshotInvalid path.
• Preserves the API -> snapshot -> LKG -> fail-closed source order.
• Adds the compatibility-smoke baseline and bounded runtime-isolation acceptance coverage.

Acceptance evidence

• The authorized real RC5 -> RC6 Global upgrade passed in one native Windows Codex environment. Effective changes were limited to sol-luna-v4/selector.py and sol-luna-v4/install-manifest.json; the second apply was a zero-write IDEMPOTENT_PASS; the owned rollback snapshot and recorded hashes verified.
• Fresh-task compatibility smoke, O1-O10, Final O4/O9 re-certification, Runtime Cases A/B/C/D, protected-state integrity, unknown-path fail-closed checks, and residual cleanup passed in the documented environment.
• Parent-visible runtime metadata, not Receipt text, established child role/model/effort/depth, direct-child counts, native-leaf behavior, parallel overlap where claimed, and zero grandchildren.
• Exact release-preparation SHA 969e2b311df54c43168c4e1bfe5a28661041d50b passed source validation on Windows, Ubuntu, and macOS in CI run 32473151395.

Post-release documentation alignment

• Setup-contract anchor SHA 3e19e2f547c6fca2a888a176767e8dc69240acbc passed Windows, Ubuntu, and macOS CI in run 32479461903.
• README pin SHA 131bfcbb546c21115f91820c86ccc00980fa7fc3 passed Windows, Ubuntu, and macOS CI in run 32479692734.
• The English and Chinese default installation entries now use the immutable RC6 setup anchor above while the installer runtime source remains fixed separately.
• Post-release O8 enumerated every published Release, selected v4.1.0-rc6 by strict SemVer precedence, and read the annotated tag twice to the same peeled commit. The installed version was already RC6, so no installer write or backup occurred.

This evidence is environment- and scenario-bounded. It is not a claim of real-runtime validation across all operating systems, clients, accounts, or users, and it does not promote RC6 to Stable.

v4.1.0-rc5 — Public Beta

Note

Historical prerelease. The current Stable release is v4.1.0.
The evidence below records RC5 at its original publication time; its tag and source remain unchanged.

RC5 Public Beta

RC5 adds:

• Natural-language Sol/Luna Status and Doctor diagnostics
• Degraded indicators
• Luna reference-cost Receipt metadata
• A safe diagnostic report
• Upgrade to Latest published-version discovery
• Installation dependency preflight

Installation requirements

The immutable RC5 setup contract requires all of the following before any Sol/Luna write:

• Codex CLI with a working codex --version
• Python 3.11+ with standard-library tomllib
• Git for immutable-source acquisition
• Read-only GitHub HTTPS access
• Native GPT-5.6 Luna capability at all five supported efforts

Codex Desktop alone does not satisfy the contract. Desktop-only installation is not supported in RC5.

Reference-cost boundary

Luna reference-cost is a same-batch ModelDial configuration comparison. It is not actual token usage, actual bill savings, subscription quota savings, or whole-task savings.

Validation boundary

Repository validation and exact-SHA CI passed on Windows, Ubuntu, and macOS. The documented-environment RC5 O1–O10 record remains bounded evidence.

Final re-certification not obtained due to Codex rollout-evidence compatibility.

No confirmed product-runtime regression.

Known limitations

1. CODEX_ROLLOUT_EVIDENCE_COMPATIBILITY — PRE-STABLE
2. SELECTOR_URL_EXCEPTION_HARDENING — PRE-STABLE
3. DESKTOP_ONLY_INSTALLATION_COMPATIBILITY — POST_RC5

v4.1.0-rc4 — Receipt Evidence-Gating Fix

v4.1.0-rc4 — Receipt Evidence-Gating Fix

RC4 fixes a Delegation Receipt reason-classification bug discovered during RC3 public-readiness validation.

The runtime delegation architecture is unchanged.

What was wrong

RC3 could incorrectly report:

Sol/Luna: Sol-only · Luna unavailable

even when the current task had observed no Luna availability failure.

The real reproduced case was:

selector invoked = NO
delegation attempted = NO
availability evidence = NONE

The correct classification was:

Sol/Luna: Sol-only · no independent bounded work

What RC4 changes

Luna unavailable is now evidence-gated.

It may be emitted only when the current task has already observed parent-visible evidence that Luna is genuinely unavailable through the normal execution path.

Examples include:

• selector fail-closed with no valid Luna profile
• selected native Luna agent unavailable
• relevant Luna capability unavailable
• a real native agent availability/spawn failure

The key rule is:

NO DELEGATION
!=
LUNA UNAVAILABLE

Luna unavailable is never the default Sol-only fallback.

Decision-neutral Receipt

Receipt generation remains descriptive only.

It must not create evidence by causing an additional:

• selector invocation
• capability probe
• tool call
• child creation
• network request
• state write
• telemetry write
• repository write

If availability evidence does not already exist, the Receipt must select another current-task-supported Sol-only reason.

Runtime architecture unchanged

RC4 does not change:

• the delegation threshold
• Daily Selector behavior
• ModelDial API v1
• full-snapshot fallback
• LKG behavior
• five Luna effort profiles
• ultra exclusion
• max direct child concurrency
• native leaf behavior
• Task Contract
• Context Firewall
• Sol Acceptance
• project/global Daily authority
• state schemas

The selector source remains unchanged from RC3.

Source validation

RC4 source Commit A:

95cfd53200a3fc53b50a48fe7ab251dcc6d5e00b

Validation:

• Windows CI: PASS
• Ubuntu CI: PASS
• macOS CI: PASS
• Full suite: 114/114 PASS

Final source/docs pin commit:

d17bea49fdb0710bb2101f1577045bed2477ff79

Validation:

• Windows CI: PASS
• Ubuntu CI: PASS
• macOS CI: PASS

Real RC3 → RC4 upgrade

PASS.

Observed:

result = UPGRADED
effective changes = 2

Only:

• Global AGENTS managed block
• install manifest metadata / owned hash

changed.

The following remained unchanged:

• Daily Selector
• five Luna agent definitions
• Global config
• Daily Profile
• LKG

Second apply:

IDEMPOTENT_PASS

Backup verification and rollback readiness passed.

Runtime acceptance

Case A — Sol reasoning

PASS.

A reasoning/architecture task remained with Sol and was classified as:

Sol/Luna: Sol-only · reasoning/architecture task

Case B — Native delegation

PASS.

Observed:

selected role = luna_max
direct children = 3
model = gpt-5.6-luna ×3
effort = max ×3
parallel = verified
grandchildren = 0

Final Receipt:

Sol/Luna: delegated · luna_max ×3 · parallel

Sol independently verified the delegated findings and retained final acceptance authority.

Case C — No independent bounded work

PASS.

This is the direct regression test for the RC3 bug.

Observed:

selector invoked = NO
delegation attempted = NO
child count = 0
availability failure = NONE
availability evidence = NONE

Correct final Receipt:

Sol/Luna: Sol-only · no independent bounded work

No additional selector, probe, tool, or child was created for Receipt classification.

Case D — Controlled genuine unavailability

PASS.

An isolated temporary environment simulated a normal delegation path whose selector returned:

NO_LUNA_PROFILE_AVAILABLE

Observed:

delegation otherwise appropriate = YES
normal-path selector calls = 1
availability failure = YES
parent-visible evidence = PRESENT

Under those conditions:

Luna unavailable = ALLOWED

Negative control:

availability evidence = NONE
Luna unavailable = FORBIDDEN

Receipt classification itself caused no additional selector, probe, tool, child, network request, or state write.

The real Codex home was not modified.

RC4 acceptance matrix

Case A = PASS
Case B = PASS
Case C = PASS
Case D = PASS

Result:

RC4_RECEIPT_EVIDENCE_GATE_FIX = CLOSED
RC4_RUNTIME_ACCEPTANCE = PASS

Installation

New or upgrading users should follow the immutable RC4 setup contract pinned by the repository README.

The installer preserves unrelated user configuration, performs ownership validation, uses transactional backups, and fails closed on ownership conflicts.

Existing RC3 users can upgrade to RC4 through the same existing-v4 installer path.

Release status

This is a prerelease.

v4.0.0 remains the current stable release.

Deferred pre-stable hardening

A selector URL exception-normalization finding remains intentionally deferred to pre-stable hardening.

It is not part of RC4:

SELECTOR_URL_EXCEPTION_HARDENING = DEFERRED_TO_PRE_STABLE

RC4 does not modify src/selector.py.

Community project

This is an independent community project and is not affiliated with, sponsored by, or endorsed by OpenAI or ModelDial.

v4.1.0-rc3 — Delegation Receipt Observability

v4.1.0-rc3 — Delegation Receipt Observability

This release candidate adds a concise Delegation Receipt to the installer-managed Global AGENTS policy.

The goal is observability, not increased Luna usage.

A task may correctly remain with Sol when delegation would add more coordination cost than value. RC3 makes that decision visible without lowering the delegation threshold or forcing child-agent creation.

What changed

For non-trivial tasks, the final response may now include one concise Sol/Luna receipt.

Examples:

Sol/Luna: Sol-only · task too small
Sol/Luna: Sol-only · reasoning/architecture task
Sol/Luna: Sol-only · no independent bounded work
Sol/Luna: Sol-only · Luna unavailable

When native Luna workers are actually used:

Sol/Luna: delegated · luna_max ×1

For verified overlapping direct child execution:

Sol/Luna: delegated · luna_max ×3 · parallel

Important behavior

The Receipt is descriptive only.

It does not:

• lower the delegation threshold
• force Luna usage
• trigger an extra selector call
• trigger an extra tool call
• create an extra child
• write telemetry or state
• expose hidden chain-of-thought or child scratchpads

The Receipt summarizes execution facts already available to the parent task.

Why this matters

0 Luna does not automatically mean the installation failed.

Normal states include:

Sol-only
→ the task is too small, reasoning-heavy, or not safely separable

Sol → Luna
→ one clear bounded execution task exists

Sol → Luna ×2/3
→ multiple independent bounded tasks are worth parallel execution

RC3 makes these states easier for users to distinguish.

Runtime validation

Real RC1 → RC3 Global upgrade

PASS.

Observed upgrade:

effective changes = 2

Only the following installer-owned runtime content changed:

• Global AGENTS managed block
• install manifest metadata / owned hash

The following remained byte-unchanged:

• Daily Selector
• five Luna agent definitions
• global config
• Daily Profile
• LKG

A second installer apply returned:

IDEMPOTENT_PASS

The transaction backup was retained and verified for rollback readiness.

Sol-only Receipt smoke

PASS.

Observed:

actual child count = 0

Sol/Luna: Sol-only · reasoning/architecture task

No extra selector, tool, child, repository write, or Global-state write was performed to produce the Receipt.

Delegated Receipt smoke

PASS.

Observed:

selected role = luna_max
direct children = 3
model = gpt-5.6-luna ×3
effort = max ×3
parallel = verified
grandchildren = 0

Final Receipt:

Sol/Luna: delegated · luna_max ×3 · parallel

Receipt role, child count, and parallel status matched parent-visible runtime evidence.

Sol independently verified the delegated results and retained final acceptance authority.

Delegation architecture remains unchanged

GPT-5.6 Sol
      ↓
Global / Project AGENTS policy
      ↓
Daily Selector
      ↓
Native Luna / selected daily effort
      ↓
Native leaf execution
      ↓
Sol Acceptance

The following remain unchanged:

• Sol is the sole planner, orchestrator, ambiguity resolver, and final acceptance owner.
• Luna is a bounded execution worker.
• Five Luna roles remain: low, medium, high, xhigh, and max.
• ultra remains excluded.
• Maximum direct Luna concurrency remains 3.
• Luna remains a native leaf.
• Task Contract and Context Firewall remain unchanged.
• Delegation threshold remains unchanged.
• No Hook Router or custom orchestration engine is introduced.

Selector behavior remains unchanged

Valid same-day Daily Profile
        ↓
ModelDial Official API v1
        ↓ invalid / unavailable
Official Full Snapshot JSON
        ↓ invalid / unavailable
Valid LKG
        ↓
NO_LUNA_PROFILE_AVAILABLE

RC3 does not modify:

• ModelDial API acquisition
• snapshot fallback
• LKG behavior
• Beijing-day locking
• same-day reuse
• selection scoring
• capability degradation
• state schema

Installation

New users should use the immutable RC3 setup contract referenced by the repository README.

Existing RC1 users who want the Delegation Receipt should apply the RC3 installer upgrade through the documented setup contract.

The installer performs an existing-v4 transactional upgrade with ownership validation, backup, and rollback protection.

Validation

RC3 source validation:

Commit A:

fe9642f95fa7b66daa210217c1e66e4b43bd88bb

• Windows CI: PASS
• Ubuntu CI: PASS
• macOS CI: PASS

Final documentation commit:

7890f17fbadfab96e16e07a640d561338c24c6c5

• Windows CI: PASS
• Ubuntu CI: PASS
• macOS CI: PASS

Full repository suite:

109/109 PASS

Real runtime:

• RC1 → RC3 upgrade: PASS
• idempotency: PASS
• rollback readiness: PASS
• Sol-only Receipt: PASS
• delegated Receipt: PASS
• native leaf: PASS
• Sol Acceptance: PASS

Documentation UX

The README now includes:

• how to distinguish normal Sol-only execution from delegation
• a reminder that 0 Luna != installation failure
• a basic delegation self-test
• an optional parallel delegation self-test

Release status

This is a prerelease.

v4.0.0 remains the current stable release.

Deferred hardening

Two selector hardening observations remain intentionally deferred:

• stronger same-day profile validation
• broader normalization of selected fetch/write exceptions

They are not part of RC3 and do not affect the Delegation Receipt feature validated here.

Attribution

ModelDial-derived test data remains attributed under CC BY 4.0 as documented in fixtures/modeldial/README.md.

Community project

This is an independent community project and is not affiliated with, sponsored by, or endorsed by OpenAI or ModelDial.

v4.1.0-rc2 — Project Delegation Policy Alignment

v4.1.0-rc2 — Project Delegation Policy Alignment

This release candidate fixes a repository-level delegation policy conflict discovered during the v4.1 RC soak period.

What was fixed

The repository root AGENTS.md previously treated the repository-local .var/daily-profile.json as the authority for Luna delegation.

That development profile could become stale and incorrectly block otherwise valid Global Luna delegation.

RC2 removes that second authority.

Actual project delegation now follows the inherited installed Global selector policy:

Project AGENTS
        ↓
Inherited Global policy
        ↓
Installed selector
        ↓
Current Beijing-day Daily Profile
        ↓
Selected native Luna role

Repository-local .var state remains available for selector development, but it is explicitly non-authoritative for actual Codex project delegation.

Regression validation

The fix was validated in a fresh repository-context Codex session while the repository-local profile was intentionally still stale.

Observed state:

Repository .var profile:
2026-08-11

Current Global Daily Profile:
2026-08-13

Repository .var authority:
NO

Installed selector authority:
YES

Automatic delegation succeeded:

• 3 native Luna children were used.
• The children ran in parallel.
• All 3 used the role selected by the current Global Daily Profile.
• Actual model: GPT-5.6 Luna.
• No direct model override was used.
• No direct reasoning-effort override was used.
• Luna remained native leaf workers with no secondary spawn.
• Sol independently verified the child results and retained final acceptance authority.

Result:

STALE_REPO_VAR_BLOCKED_DELEGATION = NO
FRESH_REPO_CONTEXT_DELEGATION_PASS

Important runtime note

v4.1.0-rc2 is a repository-policy release candidate.

The installed Global runtime payload is unchanged from v4.1.0-rc1.

RC2 does not change:

• the ModelDial selector
• Official API v1 source handling
• Full Snapshot fallback
• LKG behavior
• Daily Profile schema
• installer behavior
• manifest schema
• Global AGENTS template
• Luna custom-agent configuration
• native leaf behavior
• concurrency limit
• legacy migration behavior

Therefore:

Users who already installed the v4.1.0-rc1 Global runtime do not need to reinstall or upgrade their Global runtime for RC2.

Selection architecture remains unchanged

Valid same-day Daily Profile
        ↓
ModelDial Official API v1
        ↓ invalid / unavailable
Official Full Snapshot JSON
        ↓ invalid / unavailable
Valid LKG
        ↓
NO_LUNA_PROFILE_AVAILABLE

Luna efforts remain:

• low
• medium
• high
• xhigh
• max

ultra remains excluded.

Validation

Source validation for commit:

a2e805cdf838d2bce44df1d20ffced645252d5a3

• Windows CI: PASS
• Ubuntu CI: PASS
• macOS CI: PASS
• Full unit-test suite: PASS
• Selector regression suite: PASS
• Installer lifecycle suite: PASS
• Policy regression suite: PASS
• Documentation validation: PASS

Fresh repository-context delegation validation:

PASS

Compatibility

No migration is required for:

• Daily Profile
• LKG
• manifest
• Global runtime
• Luna agent configuration

Upgrade guidance

Already using v4.1.0-rc1

No Global runtime reinstall is required.

Pull or update the repository source to obtain the corrected Project AGENTS.md policy.

New installation

Use the repository's documented immutable setup contract for the Global runtime, then use the current repository source for the Project policy.

Release status

This is a prerelease.

v4.0.0 remains the current stable release.

Attribution

ModelDial-derived test data remains attributed under CC BY 4.0 as documented in fixtures/modeldial/README.md.

Community project

This is an independent community project and is not affiliated with, sponsored by, or endorsed by OpenAI or ModelDial.

v4.1.0-rc1 — ModelDial Official API Primary

v4.1.0-rc1 — ModelDial Official API Primary

This release candidate moves the Daily Selector's primary ModelDial source to the official versioned REST API while preserving the existing Sol/Luna runtime architecture.

This is an independent community project and is not affiliated with, sponsored by, or endorsed by OpenAI or ModelDial.

What changed

• Added https://modeldial.com/api/v1/radar/latest.json as the primary Daily Selector source.
• Retained the official full snapshot JSON as the machine-readable fallback.
• Removed the Radar HTML runtime fallback.
• Added strict validation for ModelDial API schema 1.0, batch identity, provenance, and the five canonical Luna effort rows.
• Added ModelDial data attribution for the derived test fixture under CC BY 4.0.

The v4.1 source order is now:

Valid same-day Daily Profile
        ↓
ModelDial Official API v1
        ↓ invalid / unavailable
Official Full Snapshot JSON
        ↓ invalid / unavailable
Valid LKG
        ↓
NO_LUNA_PROFILE_AVAILABLE

Unchanged

The following v4 contracts remain unchanged:

• GPT-5.6 Sol remains the sole planner, orchestrator, ambiguity resolver, and final acceptance owner.
• GPT-5.6 Luna remains the bounded execution worker.
• Luna roles remain low, medium, high, xhigh, and max.
• ultra remains excluded.
• Highest score wins.
• Ties prefer the lower effort.
• Beijing-calendar-day locking and same-day reuse remain unchanged.
• Capability degradation remains unchanged.
• LKG and fail-closed behavior remain unchanged.
• Native leaf behavior remains unchanged.
• Maximum direct Luna concurrency remains 3.
• Daily Profile schema remains unchanged.
• LKG schema remains unchanged.
• Install manifest schema remains unchanged.
• Legacy v3.2 migration semantics remain unchanged.
• No Hook Router is required.

Validation

Repository validation:

• Selector tests: PASS
• Installer lifecycle tests: PASS
• Documentation tests: PASS
• Full test suite: PASS
• Windows CI: PASS
• Ubuntu CI: PASS
• macOS CI: PASS

Real runtime validation:

• Existing global v4 installation upgraded successfully to v4.1.0-rc1.
• Transaction backup created and verified.
• Existing Daily Profile and LKG were preserved during installation.
• Installed selector successfully used ModelDial Official API v1.
• Fresh-session Global Runtime G1-G7: PASS.
• Automatic delegation: PASS.
• Native leaf: PASS.
• Native parallelism: PASS.
• Sol Acceptance Gate: PASS.
• Legacy runtime absence: PASS.

Compatibility

No migration is required for existing v4 Daily Profiles or LKG state.

The installer uses the existing manifest-owned upgrade and rollback lifecycle.

Install with Codex

Review and execute the immutable setup contract referenced by the repository README.

This is a prerelease. v4.0.0 remains the current stable release.

Attribution

ModelDial-derived test data is used under CC BY 4.0. See fixtures/modeldial/README.md.

v4.0.0 — Native Sol + Luna

Highlights

• GPT-5.6 Sol as planner/orchestrator/final reviewer
• GPT-5.6 Luna as native bounded worker
• Daily effort selection
• Five stable Luna roles
• Native leaf enforcement
• Native parallel execution
• Hook-free core architecture
• Safe installer lifecycle
• Legacy v3.2 migration + rollback

Validation

• Native Runtime PASS
• Global Runtime G1-G7 PASS
• Windows CI PASS
• Ubuntu CI PASS
• macOS CI PASS
• Clean installer PASS
• Real migration PASS

Safety

• Fail-closed selector
• Explicit ownership boundaries
• Transactional backup/rollback
• User config preservation