codeArbiter 2.8.13: host-aware runtime vocabulary + dual-host audit hardening

[2.8.13] — 2026-07-12

Host-aware runtime vocabulary, plus dual-host audit-trail hardening.

Fixed

• Audit-log lines in gate-events.log now record the writing host
  (host=claude / host=codex), restoring per-writer attribution now that two
  hosts can share one .codearbiter/ store (ADR-0012).
• gate-events.log appends are now protected by a Windows byte-range lock and
  the file is created 0o600, so concurrent sessions cannot interleave or
  truncate audit lines.

Changed

• Every runtime-emitted command reference (startup briefing, NOT-INITIALIZED
  pointers, H-12/H-18 gate messages, doctor lines, the init scaffold's stub
  text) now flows through the host seam (Host.cmd_ref), so the same vendored
  core names /ca:<cmd> under Claude Code and $ca-<cmd> under Codex
  (ADR-0011 M3). Claude output is string-identical to 2.8.12.
• The markdown surface (commands/, skills/, includes/, COMMANDS.md,
  SPRINT.md, ORCHESTRATOR.md) is now rendered from core/surface/
  templates by tools/build-surface.py — byte-identical to the previous
  hand-maintained tree, with CI (--check) holding it there.

Released-at: 2026-07-12