Rootloom Personal Core 2.2.2 — Governed Evidence Hardening

Added

• Transactional review intake with editable draft contracts, explicit immutable sealing, strict evidence JSON, and hash binding across baseline, manifest, final contract, and seal.

Changed

• Strict VERIFIED_CHANGE now requires two identical bounded captures, unchanged HEAD/ref/index, post-verification evidence revalidation, structured sealed claims, and an explicit semantic-review assertion.
• Strict review uses quality exit codes by default; --strict-bundle-only remains the explicit nonblocking path.
• Risk analysis includes bounded non-sensitive untracked text, repository globs are segment-aware, and legacy evidence remains self-declared compatibility input.

Fixed

• Sensitive replacements, renames, nested paths, and newly ignored additions are quarantined before ordinary content reads, including after verification.
• Intake, baseline, seal, evidence, and bundle paths reject symlink redirection plus worktree/Git-common-directory containment.
• Stale summaries, mixed-time captures, partial command execution, nonexclusive intake publication, and Windows fallback/test portability no longer overstate review quality.

Verification

• Local make check: 144 tests passed, 1 platform-conditional skip.
• Local compatibility smoke passed with no install side effects or rollback leftovers.
• PR #4 and merged main CI passed Linux Python 3.11–3.14, macOS, Windows, and Codex CLI contracts.