v0.32.0

What's Changed

• chore(166): reference documentation is complete under spec 197 by @bartekus in #491
• chore(199): main moves to 0.31.0, the pin moves with it, and the index restamps to 1.3.0 by @bartekus in #492
• chore(163): measured resolver expansion is complete by @bartekus in #493
• chore(166): ratify (draft -> approved) by @bartekus in #494
• chore(197): ratify (draft -> approved) by @bartekus in #495
• chore(198): ratify (draft -> approved) by @bartekus in #496
• chore(163): ratify (draft -> approved) by @bartekus in #497
• chore(199): owner rulings of 2026-10-20: supersede 168, ratify 196 and 199 by @bartekus in #498
• ci: pin every action in the unmanaged workflows to a commit SHA by @bartekus in #501
• feat(203): the determinism build restores a cargo cache, measured by @bartekus in #506
• docs(204): draft spec 204-an-agent-stays-on-its-pull-request by @bartekus in #500
• docs(201): draft spec 201-a-release-proves-itself-after-it-publishes by @bartekus in #499
• feat(200): the dependency policy has an owner, and its audit and vet records are committed by @bartekus in #502
• feat(202): OpenSSF Scorecard reports on main by @bartekus in #503
• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 in the actions group across 1 directory by @dependabot[bot] in #505
• feat(205): the YAML reader takes serde-saphyr 2.0 by @bartekus in #507
• docs(205): ratify the YAML reader update by @bartekus in #508
• docs(207): draft spec 207-the-registry-lists-what-verify-would-run by @bartekus in #510
• docs(206): draft spec 206-a-stopped-merge-regenerates-its-derived-tree by @bartekus in #509
• chore(206): ratify (draft -> approved) by @bartekus in #511
• chore(207): ratify (draft -> approved) by @bartekus in #512
• chore(201): ratify (draft -> approved) by @bartekus in #514
• chore(203): ratify (draft -> approved) by @bartekus in #516
• chore(204): ratify (draft -> approved) by @bartekus in #517
• chore(200): ratify (draft -> approved) by @bartekus in #513
• chore(202): ratify (draft -> approved) by @bartekus in #515
• docs(204): add the pull request completion contract to AGENTS.md by @bartekus in #518
• feat(201): a release ships its attestation bundles, requires signing, and verifies what it published by @bartekus in #519
• feat(206): resolve-derived settles a stopped merge's derived tree by @bartekus in #520

Full Changelog: v0.31.0...v0.32.0