v5.3.0

What's Changed

• feat(guard): #598 ADR-002 §2.1/§2.2 taint and lineage contract as a pure core — unwired, no verdict change by @jarvis-drakon in #599
• fix(openclaw): #602 quiet cli-metadata register; keep full-mode init loud by @TARSDrakon in #605
• fix(update): #604 read the end state before calling an OpenClaw step failed by @jarvis-drakon in #606
• ci(publish): harden release recovery gates and widen propagation windows (#604) by @TARSDrakon in #607
• ci: npm Trusted Publishing (OIDC + provenance); drop NPM_TOKEN by @jarvis-drakon in #608
• fix(openclaw): #583 refuse linked extensions and config snapshots by @TARSDrakon in #609
• fix(deps): bump ip-address to 10.7.2 so the production audit is green (#611) by @TARSDrakon in #612
• fix(openclaw): #614 declare ClawHub compat/build metadata so the plugin can be listed by @jarvis-drakon in #615
• feat(ledger): #617 free chained ledger + ledger verify (Phase 1 step 2) by @jarvis-drakon in #618
• fix(firewall): #506 authority-spoof, verbatim-exfil, multilingual and rot13 coverage by @TARSDrakon in #619
• chore(release): v5.3.0 by @TARSDrakon in #620

Full Changelog: v5.2.1...v5.3.0