v1.4.0

Highlights

• Luna/medium remains the default execution lane; risk-triggered Plan review uses Sol/high.
• The installer now coexists with unrelated native Codex hook groups while preserving complete Pilotfish-group ownership checks.
• The trusted-hook autoroute smoke no longer suppresses hook trust and accepts metadata-only runtime correlation only under strict fail-closed conditions.

Verification evidence

• 208 offline tests passed; the dispatch verifier suite passed 61 tests.
• The active Codex home passed agent validation and an idempotent install dry-run.
• One non-bypass live smoke returned NATIVE_OK: Luna/medium root -> exactly one Sol/high plan-verifier child.
• The redacted n=1 release-gate artifact is checked in at docs/verification/v1.4.0-live-smoke.json; it is separate from the 36-trial routing benchmark and is not a quality or cost claim.