v0.6.7

What's Changed

• record: the deploy is observed working, so two records close on evidence by @REPPL in #503
• fix: seven priority issues, with the detectors the reviews demanded by @REPPL in #504
• test: carry PR #294's coverage forward, with its author intact by @REPPL in #505
• feat: a record can say which release already carried its work by @REPPL in #506
• docs: adopt "less, but better", and name shipped_in as migration-only by @REPPL in #507
• fix: a successful bootstrap is a notice, not a fault by @REPPL in #508
• fix: honour .gitignore in the disembark scan, with an explicit opt-in by @REPPL in #509
• record: capture the lint internals section documenting an unbuilt design by @REPPL in #510
• Bug-hunt round 7: harden the issue-resolution gate; correct stale site-surface and shipped-in claims by @REPPL in #511
• Bug-hunt round 8: fail closed when git cannot answer; gate-parity and record-currency corrections by @REPPL in #512
• docs: correct the README install path and the abcd lint gating claim by @REPPL in #514
• Bug-hunt round 8: disembark scan fail-open, site-check gate, RS001 delete, and record drift (9 findings) by @REPPL in #513
• fix(ahoy): harden scaffolded name guard against inherited shell state by @REPPL in #515
• chore: remove the hand-written Unreleased entry the derived cut refuses by @REPPL in #516
• docs: a worktree is a git-state mutation, so announce it by @REPPL in #517
• Bug-hunt round 9: verbs agree with the gates they mint for, and two dead detector legs come alive by @REPPL in #519
• docs: file and plan itd-148, the worktree-first change discipline by @REPPL in #518
• Bug-hunt round 9: guarded memory reads, a fail-closed resolution gate, and validated lint severities by @REPPL in #521
• fix(ahoy): an explicit ABCD_BIN_TARGET is a sandbox, not a hint by @REPPL in #520
• chore: backfill 31 ledger records from GitHub bug-hunt issues by @REPPL in #522
• Security hardening bundle: 20 fixes (guard, launch, memory, scanner, ahoy, site, lifeboat, urlguard, intent, capture) by @REPPL in #523
• chore: session experiment record, captures, and itd-25/92 notes by @REPPL in #524
• chore: canonicalise author identity to REPPL in .mailmap by @REPPL in #525
• Issue-log sweep: thirteen fixes with tests, the README requirements gap, and the assembled-diff review round by @REPPL in #526
• docs(version): lead binary-missing recovery with the no-Go path by @REPPL in #527
• Release v0.6.7 by @REPPL in #528

Full Changelog: v0.6.6...v0.6.7