v3.127.0

3.127.0 (2026-10-23)

Bug Fixes

• admin: close story 5.2 admin authorization and request-limit review (58c409a)
• ci: exclude archived source copies from CodeQL extraction (bc61fe3)
• ci: restore security scans and live-sidecar qualification (4383627)
• client: drain promoted cleanup before owner sequence handoff (93be37d)
• evidence (d80ba3e)
• evidence: harden bounded exports and isolation verification (22515b1)
• harden bounded qualification evidence (2444752)
• story 12.2 (2361e7b)
• story 12.2 (cb41453)
• story 12.2 (4b0d69f)
• story 5.4 (d52aba7)

Features

• client: resolve Dapr routing credentials for every send (b6c903d)
• protection: bind fail-closed EXT-PROTECTION-1 owner ports (995117f)