SightMesh 0.13.0

SightMesh 0.13.0

Kernel train after the v1 rewrite. Every kernel PR merged only after the simulator was green and an independent adversarial review approved the exact head.

• Liveness (#84): stall/loss/budget predicates with episode-deduped wakes and a monotonic watermark; legacy kill paths deleted.
• Observability (#83): task-local surfaces, attention queue, structural redaction of every durable write (nested JSON, bearer/basic tokens, key prefixes, JWTs, URL userinfo), drain-first update activation.
• Routing (#85): typed-outcome failover with standard/deep route classes; every launch kind and every terminal writer goes through one per-task lifecycle fence with reload-under-lock; no network I/O can happen while a fence is held (runtime guard on every transport opener); superseded launches are stopped, never activated.
• External runs (#106, closes #55): durable wake subscriptions and live-only output-root leases for external long-running processes; authoritative terminal receipts; lost/unknown never inferred as success; parked delivery with one dedupe key.
• Defaults: kernel tasks launch unattended (BYPASS_PERMISSIONS) in their own worktree (#98); message ack-wait opt-in and kernel-side launch admission cap (#94); pool-credential doctrine documented (#95).
• CI integrity: the pinned-runtime check can no longer mask an import failure (#104); the advisory edge lane installs the package before importing it (#97).
• Release contract (#96): GitHub Release canonical, PyPI as install convenience, installers pin and verify.
• cdesktop pin: bumped to the fork's 0.2.8 pre-release, which carries fleet-wide coding-agent admission (direct launches included), unrevivable Replace-cancelled commands, owner-fenced managed-task finalization, an atomic Codex fork budget, and the fixture-panel removal.

Known issues carried: cdesktop /workspaces/summaries latency (#100); lead-kill and stale-mail resurrection asks (#105).

Do not install 0.13.0. Live canary found a launch regression: sightmesh start raises FenceHeldError because the launch request resolves the repository over HTTP while the task fence is held. Fixed in 0.13.1 (with the test fake routed through the same guard so this class is caught in CI). PyPI 0.13.0 remains for provenance only.