Vogt 0.7.16

Release metadata (machine-readable copy is attached as vogt-release-manifest.json):

{
  "schema": "vogt-release-manifest.v1",
  "product": "Vogt",
  "product_version": "0.7.16",
  "source_tag": "v0.7.16",
  "source_sha": "bd7bbb8e4c698d1d638223d16084fcdd34862dcd",
  "images": {
    "core": "ghcr.io/thedancingdeveloper-org/vogt@sha256:6325182bce7e880ff5cbbb2ae6c6de24eef1d247bbed1fb43b4b1c5af0104b27",
    "merged_stack": "ghcr.io/thedancingdeveloper-org/vogt-stack@sha256:53ef7001845e07cc2460d61e58fa7eb834b4f22e992c4fb77169dc3f4675f91e",
    "voice": "ghcr.io/thedancingdeveloper-org/vogt-voice@sha256:74f66224c4eb5a9ed71a66fa33541ad8158712cff1fe94a06eb94a44752a2e27"
  },
  "image_digests": {
    "core": "sha256:6325182bce7e880ff5cbbb2ae6c6de24eef1d247bbed1fb43b4b1c5af0104b27",
    "merged_stack": "sha256:53ef7001845e07cc2460d61e58fa7eb834b4f22e992c4fb77169dc3f4675f91e",
    "voice": "sha256:74f66224c4eb5a9ed71a66fa33541ad8158712cff1fe94a06eb94a44752a2e27"
  },
  "image_repositories": {
    "core": "ghcr.io/thedancingdeveloper-org/vogt",
    "merged_stack": "ghcr.io/thedancingdeveloper-org/vogt-stack",
    "voice": "ghcr.io/thedancingdeveloper-org/vogt-voice"
  },
  "release_tags": [
    "0.7.16",
    "0.7",
    "latest"
  ],
  "promotion": {
    "method": "build-once-promote-by-digest",
    "rebuilt": false,
    "build_workflow": ".github/workflows/build.yml",
    "build_ref": "refs/heads/main",
    "build_tag": "sha-bd7bbb8",
    "build_run_id": 38807173667,
    "build_run_url": "https://github.com/TheDancingDeveloper-org/vogt/actions/runs/38807173667",
    "release_run_url": "https://github.com/TheDancingDeveloper-org/vogt/actions/runs/38810746078"
  },
  "provenance": {
    "cosign": "keyless signatures over the same digests from .github/workflows/release.yml (at release) and .github/workflows/build.yml (at build)",
    "cosign_identities": {
      "release": "https://github.com/TheDancingDeveloper-org/vogt/.github/workflows/release.yml@refs/tags/v0.7.16",
      "build": "https://github.com/TheDancingDeveloper-org/vogt/.github/workflows/build.yml@refs/heads/main"
    },
    "cosign_issuer": "https://token.actions.githubusercontent.com",
    "sbom": "BuildKit SBOM and provenance attestations recorded in each image index by build.yml, carried by the digest"
  },
  "deployment_guide": "https://github.com/TheDancingDeveloper-org/vogt/blob/main/docs/DEPLOYMENT.md",
  "assets": {
    "android": "signed APK"
  }
}

Publishing does not deploy production; deployment is a separate, operator-approved step.

What's Changed

• test: ruff-clean the fake codex app-server fixture by @thedancingdeveloper in #1017
• fix(contracts): mint exemption ids through the context id factory (WI-1152) by @thedancingdeveloper in #1016
• fix(sessions): oversight answers worker permission prompts; v0.7.16 by @thedancingdeveloper in #1018
• fix(engine): a quiet working turn no longer spins the activity watcher (WI-1644) by @thedancingdeveloper in #1019

Full Changelog: v0.7.15...v0.7.16