Release v2.2.2

What's Changed

Features

• feat(core,pd-cli,installer,console): make pi-ai the only default runtime backend (ADR-0029) (65daaf4)
• feat(examiner): challenge study behavior report generator (SPEC §9.4/§10/§12.4) (7f25403)
• feat(examiner): Stage R F1 report recomputation from raw evidence (SPEC §12.4 报告可重算) (74f5399)
• feat(examiner): authorization-bound request-timeout parameterization for the 480s diagnostic (5c9a506)
• feat(examiner): add F1 response timing telemetry (69e8766)
• feat(examiner): register Zhipu bigmodel coding glm-5.3-flash F1 transport (owner-provided paid plan) (6e7a369)
• feat(examiner): register deepseek-v4.1-flash-1017 F1 transport wiring (owner-approved third-model failover) (dd89c2b)
• feat(examiner): authorization-bound F1 transport selection — Shuxi Atria-Dawn wiring (25a27aa)
• feat(website): PD 官网介绍视频重制——双语 30 秒案例叙事（SPEC-PD-HOMEPAGE-VIDEO-002） (#2146) (a1599e8)
• feat(examiner): capacity circuit breaker — 3 consecutive proven 429/5xx unit failures stop dispatch (6e74cf8)
• feat(examiner): PRI-1037 real-host isolation probe — engine, evidence contract and F2 gate wiring (offline acceptance) (76887c8)
• feat(examiner): automatic dispatch stop after consecutive RESULT_UNKNOWN settlements (a6a38fb)
• feat(examiner): Stage R F1 CLI execution entry + dry-run + authorization draft (0205f5b)
• feat(examiner): Stage R real actor transport + host adapter (offline acceptance) (5545366)
• feat(stage-g): CEB-001 Examiner research pipeline — full implementation (7cb2c52)

Bug Fixes

• fix(pd-console,openclaw-plugin): stop PD from writing retired openclaw profiles (7682bb4)
• fix(pd-cli): surface the retired runtime before config errors (45e5f12)
• fix(core,pd-cli,pd-console): close ADR-0029 review gaps and CI gates (e1d6ffc)
• fix(examiner): flag unit-less ledger records in stage-r-f1-report cross-checks (ea7ed07)
• fix(examiner): duplicate-safe ledger cross-checks in stage-r-f1-report (5e36791)
• fix(examiner): stage-r-f1-report test vacuity, pairing count and unused-ledger follow-up (4e75881)
• fix(examiner): pass declared requestTimeoutMs into the runner execution — the gate binding caught a wiring gap (181e197)
• fix(examiner): PR #2153 review fixes — unused vars, real assertions, socket-inactivity timeout semantics (4f342b4)
• fix(codex-plugin): self-heal unattested runtime installs and detect stale snapshots (f74524e)
• fix(codex-plugin): setup 认领 pin 前必须核对已安装字节（PRI-1046） (0cb8d0a)
• fix(examiner): close CodeQL trivial-conditional alerts in PRI-1037 F2 verifier; harden rejection tests (fbd5e6b)
• fix(examiner): real F1 runs judge the authorization clock themselves — --now is dry-run simulation only (7592cde)
• fix(examiner): runner-controlled execution mode + authoritative authorization (P1-1/P1-2/P1-5/P1-7/P1-8) (fcd75e9)
• fix(examiner): close Stage R gate review findings (CodeRabbit PR #2139) (c8bcef2)
• fix(rulecode): build binding map via Object.fromEntries — no request-sourced computed property writes (PRI-1042) (b3d099e)
• fix(rulecode): close PR review findings — stale-snapshot ledger safety, queue coverage, lease recovery, CI typecheck (PRI-1042) (bba73a4)
• fix(examiner): eliminate OBS-D1 answer-direction leakage (11f29b4)
• fix(stage-g): close PR #2136 CI blockers — CLI driver, authorization test alignment, CodeQL cleanup (b9e59dd)
• fix(rulecode): close governed identity and bounded revision pipeline (PRI-1042) (52d2c6a)
• fix(rulecode): keep invalid verification input out of run state and surface gate reasons (PRI-1041) (dc6511a)
• fix(rulecode): enforce declared verification across generation and review (PRI-1041) (4922dda)
• fix(runtime): hand over owned workers and reconcile Codex plugin delivery (PRI-1040) (e060c56)
• fix(changeset): declare create-principles-disciple alongside principles-disciple (release intent guard N-5/C4) (981e359)
• fix(pd-cli): address PR #2128 review — unreadable trajectory classification, workspace envelope, strict limit parsing, changeset (1b13597)

Other Changes

• chore: version packages [version-packages] (e030f2e)
• docs(core): scrub last openclaw-cli backend references from living docs and comments (c6ca71e)
• chore(changeset): declare principles-disciple patch for openclaw-plugin changes (673686c)
• refactor(core,pd-cli): delete the retired openclaw-cli backend and its CLI surface (ADR-0029) (3e6bea1)
• docs(adr): ADR-0029 retires the OpenClaw sub-agent runtime backend (PRI-1023) (e2a61a6)
• docs(examiner): owner decision record — OWNER_DELEGATED_AI_ONLY_REVIEW closeout (3ef71c5)
• docs(research): PL-PROJECT-STATE fifteenth supplement — ledger cross-check incremental closeout (d40f887)
• chore: version packages [version-packages] (208f64b)
• chore: version packages [version-packages] (8258125)
• chore(deps): 补 tuf-js 的 changeset 并同步 release-manager staged lock (0c4cbda)
• chore(changeset+release-locks): resync staged console lock for #2159 i18next bump (02918c6)
• chore(changeset): declare no-release intent for #2158 vite devDependency bump (19b3a95)
• chore(changeset): declare release intent for #2156 js-yaml bump (90473c3)
• chore(changeset): declare release intent for #2160 @inquirer/prompts bump (7f286e0)
• chore(changeset): declare release intent for #2161 @radix-ui/react-select bump (b6bdd9a)
• chore(changeset): declare cpd patch for #2163 react bump and dedupe workspace React copies (b50ea82)
• chore(deps): bump react from 19.3.0 to 19.3.1 (c31cef6)
• chore(deps): bump @inquirer/prompts (8ee7d94)
• chore(deps): bump @radix-ui/react-select from 2.3.7 to 2.4.1 (fb4cc76)
• chore(deps): bump tuf-js from 3.1.0 to 6.0.0 (de8f6b1)
• chore(deps): bump i18next from 26.4.7 to 26.5.6 (4508980)
• chore(deps-dev): bump vite in /packages/create-principles-disciple (23425fb)
• chore(deps): bump js-yaml in /packages/create-principles-disciple (43b3fb4)
• chore(deps-dev): bump lint-staged from 17.5.1 to 17.6.0 (a345f04)
• docs(codex-plugin): pd-status 检查清单补上快照新鲜度一项 (8f9a5c5)
• chore: version packages [version-packages] (5780bcc)
• docs(error-records): ERR-150 复发记录 — npm 退出码被当作 pin 字节已安装的证明（PRI-1046） (f8e1910)
• chore(release): advance product version to 2.3.13 (PRI-874 root manifest) (f84896f)
• chore(codex): refresh published runtime pins (262d050)
• chore: version packages [version-packages] (77ef0a9)
• docs(errors): record ERR-168 — stale whole-object snapshot save vs locked single-writer sub-state (PRI-1042) (6ead7e7)
• test(examiner): harden Stage R host isolation readiness (8c4ce45)
• test(rulecode): exercise trusted identity and connect browser fixture (PRI-1042) (306a3f0)
• docs(rulecode): specify formal ownership closure and record capability audit (PRI-1042) (e5ee829)
• chore(codex): refresh published runtime pins (a55eb51)
• chore(release): advance product version to 2.3.12 (PRI-874 root manifest) (b6fe589)
• chore: version packages [version-packages] (a91c2d1)
• test(codex-plugin-bundle): derive the runtime pin mismatch fixture from release authority (PRI-1040) (12fda5c)
• chore(release): advance product version to 2.3.11 (PRI-874 root manifest) (b0e2525)
• chore: version packages [version-packages] (56c6067)
• docs(implementation-report): finalize pd pain recall verification evidence (8afc9f5)

Release cohort: 7fa8fd8