Sentinel Shield v2.0.0-rc.1 — Engine-Only Release Candidate

Sentinel Shield v2.0.0-rc.1 — Engine-Only Release Candidate

Sentinel Shield v2.0.0-rc.1 is an engine-only release candidate.

The Sentinel Shield engine, installation and recovery system, security
controls, release-governance tooling, PHP-library consumers, Node/React
consumers, and black-box adopter harness have been validated according
to the published engine-only RC criteria.

Laravel and Symfony profiles have not been independently validated in
live consumer repositories. Framework-validated RC and full-platform GA
are not claimed by this release.

Release source

• Engine commit (CI-proven): fd3501b2718f8cef898bc7b8516c438502465b46
• Tree: dc31ac8e767480febbd521bf438040a0d9e88bdd
• Scope: engine-only
• Tag target: engine commit (source == release; the tag targets the CI-proven engine commit itself)

Default-branch CI evidence (event=push, branch=master, head=fd3501b)

All required release workflows completed successfully at the release source:

Workflow	Run ID
ci-self-test	28743340042
ci-pipeline	28743340046
ci-security	28743340067
ci-workflow-lint	28743340004
ci-adopter-validation	28743340013
ci-compatibility	28743340070
ci-production-readiness	28743340018

(Also green on the source: ci-php 28743340039, ci-node 28743339999, ci-docker 28743340006,
ci-codeql 28743340010, security-incident-validation 28743340020.)

What was validated

• Static/lint: sh -n, shellcheck -S error, actionlint, zizmor — all clean.
• Self-test: syntax PASS, production-readiness PASS (48/48 suites), full all suite.
• Artifacts: 14 CI artifacts downloaded, digest-verified, owned, unexpired.
• Release manifest: reproducible; self-consistency + reconstruction verified.
• Security posture: CI-built security summary — 0 critical, 0 high, 0 secrets, 1 medium,
  no blocking categories; the production security-acceptance engine is proven fail-closed
  (tests/prod/261-production-security.sh, blocking in ci-security).
• Operational health: health.sh proven healthy on a clean adoption fixture; offline-safe
  (network probe skipped unless --check-network).

Validation terminology (used precisely)

• engine-tested
• standalone-consumer-tested
• black-box-adopter-harness-tested

This release does not claim production-adopted, framework-validated, or
full-platform-ready.

Known limitations

See docs/v2.0.0-rc.1-known-limitations.md.