v0.4.0 — Contractual boundaries and the loop ledger

• Permission and sandbox management removed from the hybrid loops: convergo is a developer tool; codex sessions run with whatever the user's own codex configuration grants. The loop's protection is contractual — review gates, git reversibility, phase-gated external side effects.
• Gate 5 loop ledger: round counting and adjudications move from in-context memory to a per-loop file; the cap check and the ratchet read the ledger.
• Two-arm adjudication ratchet: the evidence arm is never exempted; the classification arm exempts final-fresh-exit reviewers (an exit gate blocks on its own judgment, citing the prior classification).
• Codex resume re-pins the model: codex exec resume drops the first run's -m pin and re-resolves from config — every resume now carries -c model= and -c model_reasoning_effort=, with the eval:repin ground-truth canary asserting the compensation holds across codex upgrades.
• Execution tier pinned to gpt-5.6-sol at high reasoning effort, with a config-default fallback when a pinned id is retired; hybrid loops echo resolved bindings before the first spawn.
• Frontier alignment: correctness AND testing reviewers always-on, additional lenses chosen by the diff's risk surface with the rationale recorded; aux reviewers get a side-effect boundary (targeted tests allowed) instead of a literal write ban; cvg-work TDD enforcement moves from step choreography to reviewer-checkable evidence.
• Five dangling persona lens references fixed; a new conventions test scans persona prose for deferrals to nonexistent lenses.