chameleon 4.1.2

Fixed

• A trust grant that outlives its profile no longer keeps the turn-end gate
  running on an ungoverned repo: gate_one_root now requires a COMMITTED
  profile on disk, matching every other surface's treatment of a
  profile-less root. Previously a repo that was once trusted and later
  un-profiled (its .chameleon/ deleted) kept receiving Stop-hook
  advisories — observed live as a "no passing test run" nag on a repo with
  no profile at all — and could even be turn-end blocked, while status and
  every read tool correctly reported no profile. The per-edit
  credential/eval security floor is unchanged (it is PreToolUse's,
  independent of this gate).