Production promotion — prod-20260821-070302

What's Changed

• docs(api): document the delegation lifecycle API in the OpenAPI spec (#1446 slice 2) by @AntonioSaaranen in #1628
• SDK: Characterize HavenClient boundaries and growth by @d-hinders in #1631
• docs(api): document the x402 demo-resource surface in the OpenAPI spec (#1446 slice 3) by @AntonioSaaranen in #1629
• docs(api): document the Agent Passport surface in the OpenAPI spec (#1446 slice 4) by @AntonioSaaranen in #1632
• docs(api): document the Safe-management surface in the OpenAPI spec (#1446 slice 5) by @AntonioSaaranen in #1633
• refactor(sdk): extract Haven API transport and payment mapping by @d-hinders in #1634
• docs(api): document the dashboard account + owner directory in the OpenAPI spec (#1446 slice 6) by @AntonioSaaranen in #1635
• refactor(sdk): extract paid MCP merchant transport by @d-hinders in #1636
• docs(api): document the bookkeeping export + reporting feed in the OpenAPI spec (#1446 slice 7) by @AntonioSaaranen in #1637
• refactor(ci): extract the change classifier into a dependency-free tested script (#1622) by @d-hinders in #1639
• docs(api): document the Fortnox OAuth surface in the OpenAPI spec (#1446 slice 8) by @AntonioSaaranen in #1641
• docs(api): document the Hybrid DeleGator account surface in the OpenAPI spec (#1446 slice 9) by @AntonioSaaranen in #1643
• test(ci): characterize the package-to-job routing matrix (#1623) by @d-hinders in #1642
• refactor(ci): declarative root-guard ownership manifest (#1624) by @d-hinders in #1645
• docs(api): document the approval queue in the OpenAPI spec (#1446 slice 10) by @AntonioSaaranen in #1644
• docs(api): document the session and passkey surface in the OpenAPI spec (#1446 slice 11) by @AntonioSaaranen in #1647
• docs(api): document the activity feed and onboarding funnel in the OpenAPI spec (#1446 slice 12) by @AntonioSaaranen in #1648
• docs(api): document the ten individually-excluded routes — the spec backfill is complete (#1446 slice 13) by @AntonioSaaranen in #1650
• refactor(ci): derive job fan-out from one package dependency table (#1625) by @d-hinders in #1649
• test(ci): enforce that every gated root guard has a routing owner (#1626) by @d-hinders in #1651
• fix(ci): read the changed-file list NUL-delimited so exotic paths route (#1638) by @d-hinders in #1652
• fix(auth): a purpose-scoped token is not a session credential (#1640) by @AntonioSaaranen in #1653
• refactor(sdk): extract account reads and delegate sweeps by @d-hinders in #1655
• fix(auth): equalise login cost so latency cannot enumerate accounts (#1646) by @AntonioSaaranen in #1656
• fix(x402): format receipt amount_human with the token's own decimals (#1630) by @AntonioSaaranen in #1657
• refactor(sdk): extract the EIP-3009 x402 funding-leg lifecycle (#1618) by @AntonioSaaranen in #1658
• refactor(sdk): extract the erc7710 no-funding-leg lifecycle (#1619) by @AntonioSaaranen in #1659
• refactor(sdk): reduce HavenClient to a compatibility facade (#1620) by @AntonioSaaranen in #1660
• tooling: measure branch hygiene instead of hoping for it (#1500) by @AntonioSaaranen in #1661
• chore(release): bump all published packages to 0.1.28-alpha.0 by @d-hinders in #1662
• promote: dev → main (SDK decomposition, auth hardening, OpenAPI backfill complete + 0.1.28-alpha.0) by @d-hinders in #1664

Full Changelog: prod-20260820-072606...prod-20260821-070302