v0.30.0

The consent gate can now reach a new app.

milpa/tool-runtime was capped at ^0.9 by seven packages, which meant the gate that decides on a ConsentGrant — rather than on the spelling of an operation name — could be published and still never be installed anywhere. Six of those ceilings are now widened and released; the seventh (example-agent-ready-blog) is seven versions behind and tracked as its own debt.

What arrives with this: consent is a fact produced once, carrying its principal, operation identity, arguments, session, timestamp and provenance. Surfaces project it into whatever spelling they use (config:set on a CLI, config_set as a tool), and the gate compares identity, never spelling.

Greenhouse decisions/0030, evidence/0179.