Vinci Code 0.0.53

What's Changed

• vinci worker: bus-driven unattended task daemon (Stage 1) by @thegeorgepu in #3
• vinci worker Stage 2 hooks: opt-in Governor lease + evidence bundles by @thegeorgepu in #4
• worker: killed-session cost recovery + PR suppression on limit trip by @thegeorgepu in #7
• worker: honor the envelope branch header (parsed but never consumed) by @thegeorgepu in #8
• test: envelope suite exit gate sat above 35 of its own tests (P1) by @thegeorgepu in #9
• worker: shared-tree quarantine + existing-PR evidence (two soak bugs) by @thegeorgepu in #10
• worker: fail-closed Governor — missing token/invalid lease/unreachable ⇒ BLOCKED, TTL caps runtime, --require-governor (W0.1) by @thegeorgepu in #11
• worker: outcome from harness events, not the model's narrative — evidence:none is UNVERIFIED (W0.4) by @thegeorgepu in #13
• worker: evidence before terminal state + enforced lifecycle transition table (W0.2 + W0.3) by @thegeorgepu in #12
• unattended -p: machine stops outrank DONE; finalization commands exempt from reserve/ceiling (#5, #6) by @thegeorgepu in #15
• worker: exact build identity — worker_build/server_build on every record and terminal post (W0.5) by @thegeorgepu in #14
• release: Vinci Code 0.0.51 — Wave 0 worker + harness fixes by @thegeorgepu in #16
• worker: fetch the envelope branch explicitly, resolve the tip locally, and never report not-found as divergence (#19) by @thegeorgepu in #22
• worker: build identity reads .git directly; UNRESOLVED is explicit; /v1/version retries once (#17) by @thegeorgepu in #20
• worker: record the vinci binary that actually runs (vinci_binary), recheck per task, post on drift (#18) by @thegeorgepu in #21
• worker: idempotent, fenced publisher — find-or-create PR, remote-sha refusal (never force), base ref from the envelope, fence hook (W1) by @thegeorgepu in #25
• worker: clean room per attempt — bare cache + fresh worktree, env allowlist, no push from inside, publish from the cache (--clean-room, off by default) by @thegeorgepu in #24
• worker: lease loop — acquire before clone, renew at ttl/3, loss ⇒ SIGTERM + no publish, fence before push/PR/evidence, release on every terminal path; capability declaration (W1B) by @thegeorgepu in #26
• containment-broker: hermetic native Linux trampoline link (UNADMITTED candidate) by @thegeorgepu in #30
• worker: #26 follow-ups from the #201 integration — lease-route 403s are decisions, fencing_generation is an integer by @thegeorgepu in #32
• Fix 402 error misclassification (#33) by @thegeorgepu in #38
• fix(coding-agent): reject zero-token affordability retries by @thegeorgepu in #41
• fix(#28): Detect and record no-commit outcomes by @thegeorgepu in #37
• worker: opt-in governed unattended policy profile (W2) by @thegeorgepu in #31
• worker: wire §36 branch leases into the push path by @thegeorgepu in #43
• worker: compose typed terminals, provider boundary, and digest handoffs by @thegeorgepu in #47
• worker: contract-by-reference handoff — {work_order_id, contract_digest, execution_spec_digest} → Governor registry → recompute, bind, materialize (W1B) by @thegeorgepu in #23
• feat(worker): CCM-v0 lane B — economics-summary.json on every worker terminal by @thegeorgepu in #49
• packaging: exclude first-party test paths from the release archive (exclude-list producer) by @thegeorgepu in #51
• worker: include vinci/worker in the packaged release (split from #48) by @thegeorgepu in #50
• packaging: cover fixtures/snapshots in the first-party test-path rule, and scope the test's cleanup to what it planted by @thegeorgepu in #52
• ci: draft PRs run one node leg, and refuse pushing over in-flight CI by @thegeorgepu in #55
• fix(containment-broker): refuse malformed capability attestations by @thegeorgepu in #57
• fix(containment-broker): reject ambiguous canonical receipt values by @thegeorgepu in #58
• test: drive 402 through real escalation consumers by @thegeorgepu in #56
• worker: allowlist spec.tools, and admit the four launcher network tools by @thegeorgepu in #61
• fix(search): block IPv4-mapped and NAT64 SSRF literals by @thegeorgepu in #62
• fix(search): validate every redirect hop by @thegeorgepu in #63
• Unpin the queued-message widget, and let a credential the user supplies actually work by @thegeorgepu in #64
• release: Vinci Code 0.0.52 by @thegeorgepu in #65
• fix(ci): point the release guard at the repository's actual name by @thegeorgepu in #66
• release: Vinci Code 0.0.53 by @thegeorgepu in #67

Full Changelog: vinci-v0.0.50...vinci-v0.0.53