v0.63.1

v0.63.1 (2026-10-31)

Fixes

• records: Verify a branch's runs with its own policy's signers (ad8cce1)
• core: A shared branch's run is taken only by a host whose key its policy lists, and a result it does not count is missing (e690e76)

Refactors

• seams: The results log is read for a branch (d9f0fcf)

Documentation

• openspec: Propose a-branchs-run-records-are-verified-with-the-signers-its-own-policy-names (1699c5a)
• adr: 0075, a branch's signed runs are verified with its own policy's signers (f3462eb)
• architecture: Core.22 rules out a branch's runs verified with another branch's signers (332aa49)
• openspec: The gate's checks pass on the unit's work (f24e39f)
• openspec: Record clause 87's claim gating and missing-not-failed in a-branchs-run-records-are-verified-with-the-signers-its-own-policy-names (38dd5ca)
• adr: 0075 records clause 87: a host takes a shared branch's run only where its policy lists the host's key, an uncounted result missing (87, 66, 28, S18) (54a8ae7)
• architecture: Core.22 carries main's clause-87 lines beside the shared list's (56, 87) (9f4e0ef)
• openspec: The gate's checks pass on the unit's work (c0f881a)
• openspec: Archive a-branchs-run-records-are-verified-with-the-signers-its-own-policy-names (7ae5852)
• openspec: A branch's own signers alone is its own remote-records requirement (2067599)