v1.28.8

[1.28.8] — 2026-09-22

• v1.28.8 released: desktop startup-recovery patch release. #743's Release invariant was
  re-verified against this release with no concrete blocker; the qualification tracker itself
  remains OPEN / NOT PASS and unaffected. PR #808.

Fixed

• Desktop startup no longer dead-ends on an unsupported project: when the persisted active
  project uses a schema this build cannot edit, the recovery screen now offers an explicit,
  non-destructive Safe Open beside Retry. It reads settings only, keeps the refused project
  byte-preserved and the active-project marker untouched, and fences project persistence until the
  user explicitly starts or imports a project under a fresh identity. PR #804 (behavior and write
  fence) and PR #807 (localized copy).