v2.9.0

What's Changed

• fix(trust): require team legal-text acknowledgement by @samartomar in #426
• fix: treat unavailable sandbox smoke as skip by @samartomar in #427
• feat: narrow trust findings and stabilize fingerprints by @samartomar in #428
• feat(ecc): install authorized component subset by @samartomar in #429
• fix(prune): report cross-target divergence without advancing ledger by @samartomar in #430
• feat(release): bind escalation acknowledgement to GitHub evidence by @samartomar in #431
• fix(trust): make scans observable and self-cleaning (#421) by @samartomar in #432
• docs: record v2.9 field-findings design and execution by @samartomar in #433
• ci(release): require an installable shipped baseline by @samartomar in #425
• fix: English-only ECC baseline + required analyzers — offline preflight + diagnostics by @samartomar in #437
• fix(release-preflight): resolve issue refs to their closing merged PR via GitHub evidence by @samartomar in #441
• Release v2.9.0 by @samartomar in #443

Full Changelog: v2.8.0...v2.9.0