Rootloom 4.1.0

Added

• Add the Core Reset v2 evaluator: actual Codex token-usage fields, isolated randomized
  repetitions, exact public-Skill/Reference route checks, and Guidance/Setup scenarios.
• Add orchestrate_evidence.py prepare and finish as an additive, lower-turn strict
  Evidence path while retaining the frozen Baseline v2–v4, Summary revision 5, contract,
  manifest, seal, and existing low-level CLI formats.
• Add a formal core-reset-release-eval target that requires a supplied v2 scored matrix
  with at least three repetitions.
• Load the official VibeLoft browser telemetry runtime exactly once on the public GitHub
  Pages site, with a repository contract for the registered product, production origin,
  privacy signals, and collector boundary.

Changed

• Make Direct Change a real fast path: it reads no Reference, limits inspection to the
  exact target, runs the smallest relevant check, and treats a dirty worktree as a
  preservation constraint rather than an escalation signal.
• Make Governed and Evidence Reference loading explicit and route-scored rather than
  relying on implicit composition.
• Require Governed and Evidence References before the first edit, add a compact
  Governed completion contract, and stop when a required Reference cannot load.
• Advance Core Reset scoring to mechanical v4 so successful relative Reference reads
  (including quoted plugin paths containing spaces) and bounded equivalent
  Review/Migration wording are scored from their actual evidence instead of reported
  as route or quality regressions.
• Distinguish exact user authorization from a pre-launch host-policy refusal; Rootloom
  does not repeat consent prompts or misreport that platform blocker as missing consent.
• Require Project Guidance completion to detect and remove only current-task
  verification artifacts, preventing cache, coverage, or build output from escaping the
  authorized guidance path.
• Make Direct and Scoped self-contained routine routes with no Reference load, batch
  independent inspection, and retain behavior-mapped verification plus one challenge
  pass inside the Change Skill.
• Keep initially unknown defect causes in bounded Scoped diagnosis and escalate only
  material root-cause uncertainty that remains afterward.
• Allow repository guidance to request automatic validation while requiring explicit
  user intent or one exact consumable marker for persistent refinement.
• Define the Evidence orchestrator as a single-verification-command convenience path;
  heterogeneous governed evidence continues through the low-level lifecycle.
• Retain the sanitized 126-run 4.1 candidate matrix and report, and enforce that result
  in a version-tag workflow that fails closed when the formal rubric is not satisfied.
• Refresh that matrix against the self-contained Routine tree so previous token
  efficiency, route, and quality failures pass without weakening thresholds.

Fixed

• Keep the website workflow cards equal in height and prevent hover styling from
  changing padding, content position, or layout.

Security

• Exclude unsafe package.json script names from generated SessionStart project context
  so untrusted script metadata cannot be rendered as a suggested shell command.
• Keep the VibeLoft browser credential only in the global script configuration, forbid
  local/manual collectors and Supabase access, and pin the exact upstream build whose
  GPC/DNT, navigation, API-only, and credentials: omit behavior was verified with all
  telemetry requests blocked before network delivery.