v1.8.7 - integrity and adversarial hardening
Repos from a newer hgit are rejected clearly; every OBJ_CONFLICT is shape-validated (corrupt/hostile archives are reported, not decoded blindly); check catches missing conflict dependencies; recovery via merge abort verified. New stable regression cases. Verified on real QEMU (probe 125) + full regression.