Anvil 0.6.16 - Long-running delivery and evidence recovery

Anvil 0.6.16 improves long-running agent delivery while preserving evidence, review and custody boundaries.

• Repository-owned verification profiles freeze literal commands and runner-file identities. Planning, claims and qualifying evidence refuse changed bindings.
• CLI and MCP expose advisory evidence preflight and bounded current-attempt views with retained failures, review state and invalidation history.
• Complete command-proof import refuses overflow, unreadable or replaced inputs before evidence append. Exact accepted-attempt invalidation preserves historical proofs and requires ordinary fresh-generation recovery.
• Attempt timing distinguishes elapsed interval union from summed execution and labels missing measurements explicitly. Observations grant no completion or lease authority.
• Installed skills and harness instructions describe native resume, three independent task reviews, explicit approval authority and final user validation.
• Since the previous published release, this also includes preview-first historical event recovery and stronger coordinated root-set command-proof and verification-policy controls.

The public API advances to 19. MCP exposes 26 execution tools by default and 38 tools with planning enabled. The State schema remains 22. Automation should refresh its command/tool discovery for the added advisory surface.

The source was qualified on Linux, native Windows and native Darwin, reviewed by three independent final reviewers, and validated by the user before merging PR #254. Tagged wheel and sdist artifacts are qualified by the guarded publishing workflow before PyPI upload, including full tests, Ruff, benchmark smoke, strict docs, frozen CLI/skill contracts and exact release provenance.

Install or upgrade:

uv tool install --force --python 3.11 --upgrade anvil-state==0.6.16

Full changes: v0.6.12...v0.6.16