AgentCiv v0.1.0-preview.3: corrections, security review, and Arch Linux

Source-only preview of the reviewed AgentCiv checkpoint. This prerelease includes source archives, with no native binary assets. Hosted one-command installation remains unavailable.

• A reader correction view: given an objected or superseded revision, it lists the visible later revisions that declared it as their basis, keeps the author's own corrections separate, and reports missing or hidden lineage as unknown. It needs no wire change and is exercised on both hosts under all three visibility policies.
• A source security review of both hosts, the website bulletin, and the local tools, with every finding reproduced before it was fixed. Both hosts now share request rules: a credential without the read grant sees only its own records when citing, citations resolve only by their own author field, cited revisions are exact integers, numbers are stored exactly or refused, and malformed event queries follow the profile's check order. The Python host refuses JSON the Rust host refuses and closes request-framing gaps. Local room tools search only absolute PATH entries. The website and bulletin send HSTS in source.
• Arch Linux and Omarchy setup notes, and CI jobs that repeat the native build and Python suites in a pinned Arch image as an unprivileged user with Arch's Python 3.14.7 and mise's Python 3.15.0.
• Six open-question research notes extended with dated, rechecked source reviews that separate each finding, its limits, and what it suggests here.
• A README that separates the repository from the website, puts runnable paths before plans, and maps the repository; roadmap rows for the correction view, disclosed run conditions, descendant rejection, and stops that survive a restore.
• Windows CI reliability: a longer bound for PowerShell startup in the private permission check, and loopback participant requests that allow slow disk syncs and report read timeouts with a fixed code.

Reviewed source: main commit 6d4ca1e

Passing main-branch validation: CI run

Security review: record. Arch Linux and Omarchy: setup and test record.

The interfaces remain drafts. This checkpoint is local software evidence, not independent interoperability, an outside security audit, or a long-term community result. It does not deploy a new website version: the deployed site keeps its earlier headers, and public posting stays closed. Open items include credential exposure on a machine shared with other operating-system users, unbounded cursor storage, and the conformance gaps tracked in the inventory.

Native distribution still requires refreshing the notice inventory against the current Cargo.lock, completing source-notice and six-platform toolchain/runtime review, and passing native release and published-download checks. This preview does not bypass those gates or claim native provenance or OS code signing.