Amabie 2.0.2

This patch fixes two verification trust failures reported against 2.0.1.

• Missing baseline dependencies no longer establish a change. Baseline runs receive private Node dependencies. Failed-to-start checks, missing runners and recognized zero-test failures remain inconclusive. Internal workspace links are rebased into the private tree; unsupported external layouts fail closed. The pinned Express integration exercises doctor and the real Stop hook with ignored changes, a vacuous test and a genuine discriminator.
• Deleting local session files no longer authorizes resealing. Active sessions are recorded in the user trust store. Missing or damaged tracking blocks verification, and a new prompt or commit cannot hide a previously blocked test rewrite behind a trusted task boundary.

Also included: an operator-authorized environment-name allowlist, content-pinned repository venv interpreters, bounded flaky-check diagnostics, read-only commands before task registration, clearer setup guidance, focused macOS checks, and documentation and architecture indexes.

Validation: the reviewed source passed all eight CI jobs on Linux, Windows and macOS, including Express, three standalone targets and the Golden Axios proof. Independent local unit output recorded 1,767 passes, zero failures and 11 skips (1,778 tests total). Combined productization evidence covers 92 passed gates and eight explicit host/cost skips. This evidence spans an interrupted run, a resumed run after recovery and forced rebuild, and successful independent reruns of three corrected probe fixtures; it is not one uninterrupted green run. All 13 master-pass mutations were caught. See PR #14 and the final source CI.

LOCAL remains a same-user boundary, not an OS sandbox. Refactors, dirty task starts and unsupported dependency layouts can remain unproven. Existing positive results whose baseline only failed to start are invalid; old records without baseline logs cannot establish that they were unaffected. Organic agent benefit, comparative superiority and token savings have not been demonstrated.

Install or update with npm install --global amabie-cli@2.0.2. Review the release tarball's .sha256 file when downloading the attached package directly.