v0.7.0

v0.7.0 release notes

Public skill integration

• Adds $evidence-appraisal as the eleventh core skill. It keeps prepared
  appraisal requests, independent review, owner-artifact replay, adversarial
  challenges, and targeted evidence needs fail-closed and content-addressed.
• Extends public CI with evidence-appraisal seam and adversarial contract tests,
  its quick validation, and package-layout coverage.
• Keeps the deep-research pipeline aligned with its current 11 stages:
  paper_understanding -> evidence_appraisal -> network_merge.

Operator-visible contract changes

• Scholar provider execution is fail-closed behind a separate
  ReviewedSearchExecutionAuthorization/v1. Both execute and
  execute-appraisal require the actual request-set and authorization artifact
  files; their raw-byte SHA-256 values are computed by the owner and checked
  against the external authorization pin before transport. Callers that only
  passed in-memory objects or self-reported hashes must migrate.
• New research-knowledge-network scientific writes are no longer accepted
  without an owner-validated evidence-appraisal package, a network/prestate
  binding, and a reviewed per-operation projection. This applies to claim,
  evidence, relation, and gap-transition mutations. Existing ledgers remain
  readable but are not retroactively represented as appraised.

Zotero bridge compatibility

• Keeps the Zotero declarative bridge at 0.1.11.
• Reuses the unchanged deterministic XPI
  zotero-declarative-bridge-0.1.11.xpi with SHA-256
  a5aabab25da4b61d321172524a1e961a27420f5887bcb49c76e04e27c70d037c.
• Retargets the reviewed public update link to the v0.7.0 repository release.

Release boundary

This document records public release integration only. It does not create a
tag, GitHub release, installation, Zotero mutation, network mutation, or live
provider execution.