v0.4.0 — portable adoption and golden-thread delivery

Source changes: PRs #28, #31 and #33. Existing project files remain preserved on
upgrade; reconcile adopted workflows deliberately. No automatic global update.

Changed

• Maintain the golden thread from evolving requirements and vision through roadmap,
  GitHub tickets, acceptance checks, independent adversarial review and release links.
  Add Product Owner, CXO oversight and test-strategy capabilities; reconcile records
  and safely clean up integrated work. Keep root agent instructions identical and
  session orientation compact by default (#32). Existing adoption files are preserved.

• Resolve plugin bootstrap, inspection and validation scripts from the installed package
  while targeting the consumer project. Generated adapters support project/user installs;
  adoption guidance covers shared planning, tickets, model choice, checks and route to live
  (#32). Existing project records and explicit authority remain in control.

• Select Luna high for the bounded, independently checked read-only routing pilot,
  retaining Sol medium as the baseline. Version the policy and receipts as v2; historical
  medium benchmarks remain unchanged and do not qualify high or establish savings.

• Update the join-the-team README listing links to
  Agent Plugins Directory.

• Add a guarded instruction-based model-routing pilot, Codex discovery adapter,
  reversible mode and private measurement guidance (#30). Keep portable routing guidance
  with the skills and generate adopter-specific adapters through bootstrap. No automatic
  dispatch, telemetry or consumer activation; efficiency gains remain unproven.

• Define provider-neutral independent Council review and bounded loop recovery in the
  existing skills. Preserve finding history and local subscription authority.

• Make the optional review helper fail closed with exact input/candidate receipts and
  an explicit executable-adapter seam. Offline regressions use fake providers only.

• Clarify conversation-to-requirement acceptance, skill maintenance ownership, early
  operational handover dependencies and fixed-quality-floor improvement measurement.

• Reconcile CI and release guidance with the project's approved delivery mode (#27),
  separating authorised builds from artifact-gated promotion. Extend the existing
  operating-model validator with opt-in release structural preflight, candidate and
  decision binding, and required local evidence checks. Existing adopters must wire
  the gate explicitly; structural PASS is not release approval or observed delivery.

Validation and adoption

• Source tree: cfc5ba4bb8d009dca2c4658eb290977549539612.
• make check: 129 tests passed; lint, compile, operating-model templates, packaging and Agent Plugins conformance passed. Fresh independent Codex reviewer separately reproduced all checks: PASS, no unresolved findings.
• Candidate and preserved v0.3.0 source archives both bootstrapped and validated disposable consumers. Package bytes remained unchanged. Secret review and deterministic scans passed.
• Local tested tree-archive SHA-256: b196c85d322a52b3eb380bc88e97f425d96a7074e8607295e015c56fec97e87d. This identifies the local validation archive, not GitHub's generated archive bytes.
• Existing adopter files are preserved. Reconcile local workflows/adapters deliberately; installation does not grant project authority. No global installation or production deployment was performed.
• Rollback: select the preserved v0.3.0 source package without moving published tags. This does not automatically revert an adopter's project contract.

Source-only release under ADR-003. Host UI/update coverage and measured adoption benefits remain follow-up work. See PR #33 for the candidate-bound validation and review record.

Publication verification

Merged main commit: e93069b92735ba096abf662f2b9d95a0ebfd36f9. The annotated remote tag resolves to this commit; its tree matches the reviewed candidate. Main DX Validation also passed. The downloaded GitHub source archive matches every reviewed file byte, executable bit and symlink target. Observed download SHA-256: f12b08c334b836d98aa50fc0531a140e6830d955301d28dca133ad661f6bd7cb (GitHub archive encoding may change; the source tree is authoritative).