v5.0.0

5.0.0 (2026-08-05)

⚠ BREAKING CHANGES

• gates: trusted authority metadata remains removed and project config application requires a trusted publisher; migration guidance now targets Flow 5.0.0.

Features

• kit: declare builder.build workflow routing (#214) (23a84ac)

Fixes

• evidence: refuse evidence writes for gates the run cannot appraise (#223) (#236) (d2252d4)
• exception: do not misreport run status when accepting exception for unreached gate (#212) (#234) (1915421)
• gates: enforce trusted producer pins (#215) (9db117e)
• gates: exception may not override explicitly failed evidence (#198) (#235) (3a5c60f)
• gates: re-verify evidence artifact integrity at evaluation time (#205) (#228) (22498b4)
• init: report a distinct, actionable error when --cwd does not exist (#156) (#227) (ae28c5c)
• reports: report terminal step of completed run as passed, not current (#211) (#232) (ecf3e89)
• route-back: count logical failures, not evidence re-evaluations (#153) (#229) (20ccaf3)
• route-back: normalise unrecognised reasons to default and bound gates without policy (#197) (#233) (43a1a0d)
• route-back: tolerate legacy unbounded limit_exceeded in retry proof; race-test and comment follow-ups (#240) (0c03702)