v0.1.85

What's Changed

• #391 feat(D1): add immutable publication journal store by @hachej in #721
• #391 feat(D1): fence destructive publication by @hachej in #722
• #391 feat(D1): recover pending destructive publication by @hachej in #723
• #391 feat(D1): integrate recoverable destructive publication by @hachej in #724
• #391 feat(D1): bind strict host security identity by @hachej in #725
• feat(d1): bind approved release migration evidence by @hachej in #726
• feat(d1): bind migration evidence to release image by @hachej in #727
• feat(d1): isolate approved release authority file by @hachej in #728
• feat(d1): attest approved host artifacts by @hachej in #729
• feat(d1): verify Caddyfile authority by @hachej in #730
• refactor(core): expose security config projection by @hachej in #731
• feat(d1): verify core environment authority by @hachej in #732
• feat(391-AC1): AC1-T2 — typed artifact authority, AgentTask v2 by @hachej in #733
• #391 D1-004d: bind durable admissions to execution identity by @hachej in #734
• feat(391-AR1): AR1-002 — opaque ShareEntryV1 store by @hachej in #735
• feat(sandbox): qualify EU runsc isolation profile by @hachej in #738
• chore(391): bead hygiene — re-render newlines, name owned error codes by @hachej in #736
• feat(governance): full GovernanceUsagePanel (role + caps + context + usage meters) by @hachej in #739
• AR1-003: membership-gated /a deep-link route (Lane W) by @hachej in #741
• refactor(workspace): export app-shell stylesheet so apps import instead of copy by @hachej in #740
• feat(boring-mcp): createBoringMcpAppBindings factory to eliminate per-app MCP wrapper copies by @hachej in #742
• AR1-004: minimal MCP resource support for shares by @hachej in #743
• feat(d1): mint approved host release capability by @hachej in #744
• fix(governance): release per-run hold on user-initiated stop instead of charging it by @hachej in #745

Full Changelog: v0.1.84...v0.1.85