IRIS Ops Studio v1.3.1 — one-hour guard session and clear judge route

This maintenance release improves the optional HTTPS managed guard and the reviewer path. It does not replace the historical v1.3.0 archive or widen the guard to the entire direct SysAdmin console.

• A managed-guard navigation session now has a fixed maximum one-hour family deadline. Bounded native access can renew read-only while the tab is visible and idle, but renewal never extends that deadline or repeats a write.
• Write approval remains workflow-specific and short-lived (at most 60 seconds); exact-target previews remain at most 30 seconds.
• Guard navigation presents only its supported Wallet, Web apps, Access control and local Session journal views. The broad direct console is a separate URL and installation.
• The README and docs/JURY-EVALUATION.md provide distinct routes for safe demo, full direct-console evaluation and the optional managed guard. The guard ZIP includes its own JUDGE-GUIDE.md and independent integrity verification.

Verification: 270/270 JavaScript tests, 12 JavaScript syntax checks, independent extract-and-verify of the attached ZIP, 18 native renewal checks on a disposable IRIS Community 2026.2 instance, and one real browser session observed reaching the one-hour boundary. The elapsed-browser observation used the preceding local bundle; this exact new ZIP was not reinstalled for a fresh live-IRIS pass. The separate scripted long-duration test remains unrun. The optional guard reports productionReady: false; it is a bounded technical review package, not an in-place upgrade or a claim of general production readiness.

Attachment: irisops-guard-enrolled-review-v1.3.1-20260927.zip

SHA-256: 748A1B361198AA6AEA850E6AA32CB538724C9A47C21C25D0364E662571B655DE

Extracted bundle content SHA-256: 6cb115882a4cea63f0d7b74854daeed168e8280585a7434db6728f8fcbe7a6f0

Illustrated jury video guides

These guides use synthetic narration to explain the evaluation path; they are not live test footage. Use the written jury evaluation guide and validation record as the technical evidence.

• Install and Evaluate the Contest Entry — installation choices and the judge route.
• How the Bounded Server Guard Verifies a Change — read-only enforcement, short-lived approval, execution and readback.

The three earlier videos document previous direct-console workflows and remain linked in the README.