v0.4.0-rc.4

What's Changed

• docs: ADR-0029 adopt LLM-as-a-Verifier (grader + progress signal) by @TheConnMan in #393
• docs: ADR-0030 proactive within-episode memory agent by @TheConnMan in #394
• ADR-0037: agent-facing observability CLI helper by @TheConnMan in #479
• ADR-0037: opt-in binding hook and Pareto model routing by @TheConnMan in #480
• Fix TUI tab visibility and repo-root detection for Deploy-to-Slack by @TheConnMan in #481
• Document macOS Gatekeeper workaround for the release binary by @TheConnMan in #482
• Renumber observability ADR 0037 -> 0038 (collision with model-routing ADR) by @TheConnMan in #483
• Emit structured JSON under --json for every agent-facing verb by @TheConnMan in #503
• Reserve model-credential env names for connector secrets by @TheConnMan in #486
• Correct the drifted interface catalog and gate it against re-rot by @TheConnMan in #484
• Pin the duplicated CONNECTOR_SECRET_KEYS_ENV literal by @TheConnMan in #504
• Enforce plugin manifest secrets policy at deploy time by @TheConnMan in #510
• Gate the TUI recipe catalog against the clap grammar (#462) by @TheConnMan in #509
• Add ADR-0039: workflow-controlled agents run on AgentOS as a callable substrate by @TheConnMan in #511
• Add ADR-0040: adopt ACP as an edge projection by @TheConnMan in #522
• Make the TUI Platform tab governance recipes tier-aware (#463) by @TheConnMan in #525
• Share one AgentTarget args struct across local and cluster tiers by @TheConnMan in #523
• Accept ADR-0022 and rewrite it to match the code as a build spec by @TheConnMan in #528
• Add a cluster observability twin behind one tier-aware endpoint seam by @TheConnMan in #534
• Bound stream delivery with a cap and a dead-letter graveyard by @TheConnMan in #536
• Gate outbound Claude Code plugin compatibility in CI by @TheConnMan in #537

Full Changelog: v0.4.0-rc.3...v0.4.0-rc.4