Axx 0.21.14 - Windows x64 test release

Axx 0.21.14 — explicit execution modes and truthful action receipts

Includes the persistent local transcription worker from 0.21.13:
one warmed model between turns, bounded responses and
worker disposal on cancellation. Physical microphone latency remains a separate
acceptance check; this release makes no two-second guarantee.

The existing command/executor path now binds background/foreground mode to each
operation and rejects unavailable modes before dispatch. The Commands panel shows
supported modes; isolated execution remains unavailable.

UIA observations carry observation/session/process identity. A process start time
is included in control tokens to reject stale identity after PID reuse. A new
semantic button lookup abstains for missing targets, duplicate labels and truncated
trees. Generic InvokePattern delivery no longer claims a verified application
effect. Specific adapters retain their own postconditions.

Final action state and receipt commit atomically. Cancellation before dispatch
prevents even non-cancellable tools from starting. Identical mutations with unknown
effects cannot be prepared under another ID. Process inspection adds executable
and process-instance evidence; shell distinguishes timeout and output limits.
Uncertain receipts stay visible after restart without disabling independent
observations in Commands, Chat or the capability workshop.

Validation: 105 focused command/HTTP/learning/discovery regressions, 30 action
tests, and the browser chat-workspace regression passed. A native WPF fixture
verified semantic selection/abstention, process identity and an actual SHA256 file
write. Across 346 samples at a nominal 10 ms interval, focus, pointer and clipboard
sequence did not change. This is a bounded fixture check, not the 30-minute/1,000
operation acceptance gate. Installed validation is recorded in local release
receipts. The final installed executable passed UI mode selection, restart with
an uncertain receipt without blocking new observations, real WPF button lookup
and invocation with a separate approved content readback, and a hash-verified file
write. Final regression checks also passed 28 command UI assertions, 30 desktop
UI assertions, chat/workshop flows and 26 focused backend/routing tests.

The complete architecture is not delivered by this release. Cua upstream, visual
grounding models, REA, isolated VM execution and Telegram are still unregistered.
The component inventory reports those limits, and the five local skills now
document actual tools and pending integration requirements. No external models,
VM images, user voice data or runtime state are distributed by this change.

Migration is additive: nullable delivery_mode column, with no settings/history
deletion. Existing uncertain operations still require reconciliation or manual
review. Android is unchanged. See implementation status.