v3.2.5
Control-plane reliability hardening release.
Highlights:
- bounded, semantic stdin/MCP framing with deterministic transport errors
- trusted Codex App turn attestation and one-route-per-real-turn enforcement
- durable external-call receipts with lost-stdout recovery and no resend
- authoritative artifact digests, atomic projections/review closeout, and safe Pack/heartbeat migration
- exact release/install identities, immutable compatibility workflow dependencies, bilingual documentation, and App compatibility receipts
Authoritative acceptance used the exact commit 4ce220dc2bce3977552444391e8bcdad4b9908a6, Mac mini root-owned repository/main attestations, and the same-SHA real Codex App canary. GitHub Actions is compatibility-only. This repository mitigates and fails closed around app-server behavior; it does not claim to repair upstream app-server process reaping.