v10.0.3

[10.0.3]

• Start OpenCode safely from home after a global installation. Flow stays
  inactive there and explains how to open a project, instead of failing the
  server plugin. Project state and source scans remain excluded from home.
• Add a provider-free packed startup check for home, Git projects and ordinary
  folders to CI and release smoke. Session v5 schema, permissions, validation, review,
  continuation and closure requirements are unchanged.
• Use the reviewed baseline-qualified patch route against 10.0.2. No new live
  model qualification or model canary was run for 10.0.3; 10.0.2's 80/81 matrix
  and 6/6 canary are historical evidence, not measurements of this patch.

Upgrade with opencode2 plugin add opencode-plugin-flow@10.0.3, then start
opencode2 inside your project folder.

Patch qualification

Policy: baseline-qualified-patch v1. Record: sha256:c15fac162cb8bcbef4a999920be65b2664c9ec6c72fee5a1a4a53dafaf8f56d9.
Candidate 10.0.3: sha256:74294e90f7ff9e9500fab1ee4b896273bca9848815eab6a494c55a7bf75b1399.
No live model evals or canary were run for this candidate. Offline checks and reviewed change scope support this patch release.
Prior measured version: 10.0.2; artifact: sha256:6d8345ea7968799778fa4dc9c818ab37449b70c16a08a7eedba48f8c24c8f5a4.
Prior qualification bundle: sha256:89b32228d6651737152a616dea44439b1d8acd23037c1f6123f91c2e920674ed; prior canary: sha256:e640e62aa1794e1614100c2c58858603c4d908daadab5d92348ecaca5bad1f22.
Prior results only: 80/81 passed. These are not measurements of this candidate.
Scope approval: Maintainer approval in this T3 Code thread on 2026-10-29: release the home-startup fix without a new model qualification; full-stop requires reviewed PR handoff before merge.. Exact-version home-startup compatibility patch. Only the two reviewed runtime files and the declared smoke command may change. Retain 10.0.2 historical matrix/canary evidence; candidate assurance is deterministic checks, Linux packed startup, replay and independent review, not a new model measurement.