Governance Substrate v0.6.0

Governance Substrate v0.6.0 expands the tested execution boundary across additional runtimes and adds task-scoped authority, automatic containment, and stronger compromised-adapter controls.

The reference implementation now includes a backend-neutral conformance suite with a hostile Rust worker, plus real runtime evidence for Docker/containerd, rootless Podman, gVisor, Wasmtime/WASI, NVIDIA OpenShell, native Linux, native Windows, Kind/Calico, and GKE Autopilot in documented configurations. It also adds incident-derived acceptance, request-bound provider gateway dispatch, independent audit witnessing, measured shutdown, and audit receipts for circuit trips.

Verification on the release commit: 141 unit tests passed with 10 opt-in skips; the GitHub Actions run passed 14 jobs, including real Qwen Docker acceptance and runtime enforcement. The optional manual Phi job was not part of this release-commit run.

Scope: These results apply to the documented tests and configurations. They do not establish universal confinement or attest to hidden hosted-provider behavior.

• Technical architecture
• Full release notes
• Evidence freeze
• Release-commit CI

Attached source archive: gov-substrate-v0.6.0-source.zip
SHA-256: 6B79F6FBB045798288A731A9513D0C01163F1CCA2B1A23EB7C5C0D67FF7F332C