v0.6.1

0.6.1

• The heartbeat can finally reach an async orchestrator. The background beacon used to only WRITE a
  status pulse (to a tty or a sink file). A message-driven caller that only takes a turn when input
  arrives (a chat/Slack/Telegram bot, idle between messages) has no polling loop and never reads that
  tty, so a delegated run went silent until the user pinged. New OSRC_HEARTBEAT_WAKE: export a notifier command and the beacon TRIGGERS it on
  every state change (blocked/dead) and on the periodic digest (still-cooking / landed), passing the
  compact summary as $1 and the full event JSON on stdin (and $OSRC_WAKE_EVENT). The plugin never
  sends anything itself — it only triggers the caller's own sanctioned notifier. Untrusted event text is
  passed as an arg / stdin / env only, never interpolated into the command, so a task summary with shell
  metacharacters cannot inject. Best-effort and time-bounded (OSRC_HEARTBEAT_WAKE_TIMEOUT, default 20s):
  a slow or failing notifier never wedges the beacon or gates a wake ack. Suppress just the periodic push
  with OSRC_HEARTBEAT_WAKE_DIGEST=0. New suite test_heartbeat_wake_push.
• Async-supervision guard. A headless bg/fanout launch (no tty) with no wake and no sink armed now
  prints an ASYNC SUPERVISION warning at launch, naming the exact fix, so an async orchestrator can't
  launch work and discover the silence an hour later.
• Stop re-nagging a remembered org-policy refusal. When Devin's org policy blocks the sandboxed
  autonomous mode that research needs, the tool used to re-attempt it and re-print the scary error on
  every run, then suggest yolo (which is LESS safe and not the fix). It now DETECTS the refusal once,
  REMEMBERS it (~/.outsourcerer/lane-posture/devin.autonomous, 0600, symlink-safe), and preflight-skips
  the doomed attempt with one clean, routable notice (use Codex for sandboxed exec, or run read-only on
  Devin) — never silently downgrading to no-sandbox. New posture subcommand (status/reset) and suite
  test_devin_org_policy_posture.