Agent Lifecycle Kit v1.50.2
Security and architecture hardening
- Block generic descriptor-driven host launches and wildcard environment forwarding until a separately qualified local-launch path exists.
- Add shared receipt redaction, fail-closed neutrality completeness checks, descriptor installation metadata, and portable release-evidence validation.
- Split the CLI dispatcher into bounded routing modules without changing the public command contract.
- Normalize packaging evidence across POSIX and Windows paths.
- Update package, plugin, marketplace, documentation, and publication metadata to 1.50.2.
Validation: 776 tests, Linux/macOS/Windows CI on Python 3.11-3.13, neutrality checks, offline release candidate, packaging smoke, and independent OpenCode Review Mesh audit.