v0.2.558 — Review phases, selected-roster agreement and Gemini 3.8 setup

Public v2 reviews now bind the review phase to its purpose: formal-plan uses the shared plan purpose; pre-merge and implementation-review use the code purpose. Omission defaults to pre-merge; null and unknown values are refused before dispatch.

Every selected enabled review entry must explicitly approve the current basis with SAFE TO MERGE. Valid negative verdicts remain nonapproved, including Minor-only negatives; a separate family-count threshold no longer vetoes an otherwise agreed selected roster.

Leader guidance covers current environment and evidence, verified findings and refutations, one compact residual, and evidence-based reopening. Unresolvable wording disputes stop without manufacturing approval. Exact model IDs, existing JSON configuration, authentication, legacy entrypoints and guarded cleanup remain preserved.

Update with the English guide or Korean guide, rerun bootstrap and start a new Codex session.

Native Gemini CLI can now select exact gemini-3.8-flash with its model-specific 0.61.0 compatibility floor; existing models keep their earlier floor. Its upstream HIGH generation default and optional native JSON overrides are documented separately from AGY effort. Shipped model defaults and the existing roster schema are unchanged. Each OS owner runs common and OS-specific checks on that OS's host or native CI runner.

Validation:

• Exact current macOS archive: 1,828 tests passed, 2 Gemini-only fixture variants skipped; all 49 source/archive hash targets match.
• New Gemini compatibility TDD: 119 passed, 2 skipped after observed RED. Both installation guides' JSON examples parse.
• Current CodeQL CI passed. Current R4 explicitly approved by Opus, Pro, Flash and Astra; ROUND_INTEGRITY_OK and ALL_SELECTED_APPROVED.
• Previous implementation's Ubuntu container results are historical observations, not current native Ubuntu proof. No cross-OS Docker test was run for this amendment.
• Prior source skill structure, schema validator and provider-free lifecycle passed; the amendment did not change the skill bodies.

Archive source commit: 632f42633d3a92d6cb27168cd15c4d4debd8558c.
Archive SHA-256: fa04b7b7a7eddec1d3afd2f4318ee193a3494e21fa6ccb01213a061d18c38bfe.

The shipped shared payload advances from contracts 055204c and prompts 7f527ef to 04245c740afc9be36ad7702a134f71aec8ff0b7f. Shared-spec PR #8 separately publishes the implementation guide on shared main 19f0cf1f6772ad1c480d828c53129d50910495db; this release does not adopt that revision marker or claim Claude-host conformance. It does not claim measured prompt-quality improvement, hidden runtime-model attestation, authenticated all-provider policy certification or reload of existing Desktop sessions.

Verified Gemini setup covers stable 0.61.0+; preview/nightly adapter acceptance does not prove the alias or inherited HIGH configuration exists in every prerelease build.

Published main merge: 7f75863. Its tree equals the tested archive source commit above.