MergePilot v0.1.0-preview.2 (Pre-release)

Preview.2 — external acceptance round 1 fixes. Image bytes identical to preview.1.

⚠️ Known blocker (2026-08-24 acceptance)

SAME_MACHINE_BLOCKED / EXTERNAL_BLOCKED — do not use this package for evaluation yet:

• The WSL localhost forwarding does not publish the console to Windows: http://127.0.0.1:8600 is unreachable from Windows browsers on NAT-mode WSL2 with system proxies present (works only inside the WSL distro).
• The offline tar ships the 8 built images but not the locked pgvector base image required by start; offline installs will attempt a network pull.
• Start failures can leave Created orphan containers; Stop/Cleanup may leave the keepalive process alive; the STACK_PARTIAL recovery hint omits cleanup --apply.
  A preview.3 with an explicit Windows-side loopback publication edge and the full offline image set is being prepared on fix/preview-usability-round2.

Fixes (preview.2)

• manifest.json image digests are now derived from images-oci.tar index.json and are verifiable from the shipped tar (preview.1 recorded build-time IDs not reproducible from the tar).
• Removed hardcoded stale git SHA from README/QUICKSTART/ARCHITECTURE-SECURITY/bootstrapper; manifest.json git_commit is authoritative.
• Added Preview feedback issue template (installation/environment/runtime/UI/documentation; sanitized doctor/status/version attached; no secrets).
• README now states support scope, known limitations, uninstall, feedback entry.
• checksums.sha256 uses forward-slash paths so sha256sum -c works cross-tool.

Verify

sha256sum -c checksums.sha256
docker load -i images-oci.tar # compare docker inspect digests with manifest.json

Truth boundaries unchanged (all NOT_VERIFIED): application_integration / database / production / revision_producer_contract / audit_producer_contract. transport_profile=wsl-user-relay, direct_routing_verified=false. Not production ready.