Production promotion — prod-20260901-093003

What's Changed

• sync: main → dev after the 0.1.32-alpha.0 promotion by @d-hinders in #2267
• docs(release): start the money-flow QA run in preflight, not at the promotion by @d-hinders in #2269
• ci: make the dead dev-deployed post-deploy QA trigger's silence detectable (#2268) by @AntonioSaaranen in #2272
• fix(x402): resolve the rail before the settlement-scheme guards, so a retired rail cannot be diverted off its 410 (#2245) by @AntonioSaaranen in #2275
• refactor(backend): retire Haven x402 resource surface by @d-hinders in #2270
• docs(qa): the Railway post-deploy hook this doc instructs does not exist by @d-hinders in #2277
• fix(connect): approve-budget CTA at the dashboard-unlock moment + elapsed-time wait visibility (#2279) by @d-hinders in #2280
• fix(sdk,api): the 'approved' branch stops and tells the user (#2262) by @AntonioSaaranen in #2281
• test(ci): point the Playwright harness at the live rail, not the retired one by @AntonioSaaranen in #2285
• Document Connect setup network requirement by @d-hinders in #2287
• fix(agents): render a delegation budget as 250.00, not 250.000000 (#2283) by @AntonioSaaranen in #2294
• fix(mcp): resolve x402 merchant-call context before relaying funding (#2282) by @AntonioSaaranen in #2296
• fix(sdk): send PAYMENT-SIGNATURE alongside X-PAYMENT on every merchant retry by @d-hinders in #2297
• Lower sweep floor for x402 micropayments by @d-hinders in #2299
• feat(gtm): Agent Discovery Phase 0 — llms.txt, canonical 402 page, npm metadata pass by @AntonioSaaranen in #2303
• fix(x402): unblock the funded-but-unsettled resume path (#2290) by @d-hinders in #2304
• docs(architecture): the doc-4 index row names the resume cure, not just its trigger by @d-hinders in #2306
• fix(x402): one contract for the quote → signer → merchant retry chain (#2291) by @d-hinders in #2308
• test(money-path): remove 56 unfalsifiable retired-rail guards and guard the mechanism (#2307) by @AntonioSaaranen in #2309
• fix(ship-next): make Closes #<issue> conditional on operator-verify mode, and enforce it by @AntonioSaaranen in #2314
• feat(mcp,sdk,backend): let an agent report a plain-HTTP x402 merchant retry (#2292) by @AntonioSaaranen in #2311
• fix(ci): label descriptions exceed GitHub's 100-char limit, so operator-verify was never created by @AntonioSaaranen in #2315
• refactor(frontend): delete the dead PasskeyEnrollFlow onboarding flow (#2261) by @AntonioSaaranen in #2316
• fix(backend): refuse the retired rail before resolving payable assets (#2274) by @AntonioSaaranen in #2322
• fix(agents): let the agent card shrink to its grid track at 390 (#2251) by @AntonioSaaranen in #2324
• fix(api): name the two wire shapes of allowance_amount apart (#2295) by @AntonioSaaranen in #2326
• docs: retire approval-queue residue across eight docs (#2313) by @AntonioSaaranen in #2336
• fix(ci): scan allowlisted prose files outside app/ and components/ (#2317) by @AntonioSaaranen in #2335
• fix(x402): name both wire header names wherever an agent retries a merchant by @d-hinders in #2339
• fix(x402): send the v1 alias only where it can help — erc7710 is v2-only by @d-hinders in #2342
• fix(x402): convert the nested mcp_transport — the settle handoff refused its own output by @d-hinders in #2344
• docs: resolve the post-merge review findings on #2313 (refs #2313) by @AntonioSaaranen in #2338
• fix(ci): make the operator-verify close guard read every emitter, and read assertions rather than words by @AntonioSaaranen in #2337
• chore(release): bump all published packages to 0.1.33-alpha.0 by @d-hinders in #2345
• fix(copy): the downloadable SKILL.md said Haven authorizes the amount (#2334) by @AntonioSaaranen in #2350
• fix(ci): the operator-verify guard must not re-read commits already on dev by @d-hinders in #2351
• Promote dev → main: 0.1.33-alpha.0 (x402 v2 merchant leg, epic #2288) by @d-hinders in #2346

Full Changelog: prod-20260831-073011...prod-20260901-093003