0.5.0.dev6 — signed work provenance and reliable Windows temp storage

Potbot 0.5.0.dev6 adds the T01.3 core provenance profile: seventeen registered SYN work Cogs plus seal/replay Cogs, seven canonical wire schemas and immutable policy/input/causal bindings on the existing work ledger. Every admitted operation retains start, actual progress and completion statistics. Historical signed receipt inspection never dispatches the original handlers.

Windows scratch storage now inherits the selected parent ACL, preflights actual file access, routes subprocess temp variables, uses compact unpredictable names and performs bounded cleanup. Atomic destination-local writes retry only real name collisions; denied private recovery storage fails before disposable database creation. Pytest, build/check scripts, workers, benchmarks, public broker-policy staging and native launchers use the maintained policy. Native vault ACLs remain private.

Validation includes mandatory native Windows/Linux checks, real PostgreSQL roles/artifacts/REST/WebSocket readback, actual Python CLI/MCP subprocesses, synthetic-key Ed25519 sealing and replay, plus native launcher and cross-file-type Windows regressions. Local Windows validation: 161 applicable cases plus a separate 20-case restricted-token temp run; 197-module type check passes. CI and release manifests retain exact-source evidence.

This is a source preview. T01.3 remains in progress for universal producer adoption, general artifact range streaming, exporter-failure/overhead qualification and independent remote hardware validation. Other work-kind handlers in the fixture are scripted. A single cProfile comparison is not a stable overhead benchmark. Unmeasured target resources and costs remain unavailable. Existing installed runtime, vault, model cache and live device state are untouched. PyPI is not configured for this repository.