agent-collab v7.0.7

Activation release for agent-collab v7.0.7 with the commit-bound, signed, hardened, and notarized native runtime for every architecture in the shipped runtime manifest.

agent-collab 7.0.7 — runtime 5.0.8

• Pair runtime 5.0.8 with the public client that preserves canonical account HOME and native SSH context. Both macOS architectures must pass the coordinated signing, import and staged qualification gates before publication.
• Gemini's existing native carrier supports one correlated read-only completion after an empty successful turn in the same process, keeping the original diagnostic and recovered answer. Codex tolerates nonprotocol startup noise and malformed optional tool metadata. Codex and ACP preserve irregular Unicode and correctly scope optional model observations. Shared interactive stdin writes remain under supervision and backpressure handling.
• Existing native transports and descriptor-admitted actions remain in place; no provider fallback, automatic request replay, replacement login profile, broker, or new route is introduced. Claude and Grok transport selection is unchanged; no omitted Claude profile is activated.
• Keep wire schema 12, protocol 5, native contract 4, 12 logical actions, eight logical agents and wire digest a675807e0ff5f0544d7cc9d659914ce2dadac9be8efd0fb56635815e5c3e842a unchanged. Bind the new public client and release-exact manifest schema to the signed producer.
• Retain caller-owned independent-review checks, advisory results when evidence is missing, all-author reviewer selection and a nonrenewable corrected-review allowance.

Fixed

• Align architecture handbook guidance with all-contributor family exclusion and response-correlated native reviewer identity. Configuration may identify a candidate but cannot establish independent approval. Missing reviewer evidence leaves independent approval unmet and content advisory; it is not provider unavailability.

• Keep logic-check status advisory until response-scoped evidence establishes reviewer independence, and compare every contributing author family during reviewer selection.

• Limit the caller's corrected read-only review to one correction per original request across descendants; explicitly exclude ambiguous native mutations in generated guidance.

Changed

• Clarify that provider-free planning reports route eligibility, not reviewer
  family identity. Candidate selection may use currently known configuration or
  response-scoped observations; independent approval after return requires
  response-scoped evidence distinct from the primary and every contributing
  author family. Governance-review and plugin README invocation use the same
  caller-verified checks. Chain keeps its existing routing exclusions; those
  exclusions do not prove response identity or all-contributor independence.
• Seat required initial reviewers first and reserve a tiebreaker only from spare
  independent eligible reviewers. A sole eligible independent reviewer is used
  initially; unmet required panel size stays visible.
• Document optional response-scoped native model-identity observations in
  provider-neutral public guidance without expanding the signed wire.

Fixed

• Use the OS account's canonical home for native execution and preserve SSH
  session markers so providers retain their own login behavior. Request files
  remain temporary; login profiles are not copied.
• Clarify that native recovery stays within the original invocation and that
  existing operator authorization persists across tool steps in the same scope.

Changed

• Document one bounded caller fresh-review for read-only review and
  governance skills: after a completed or terminated attempt with no
  substantive result and no uncertain external mutation, the caller may
  issue at most one new corrected work unit to fix a demonstrated setup
  defect while retaining the failed attempt. Shared consumed-work
  no-replay, worker, dev-delegate, and merge-resolve contracts stay
  unchanged.

Changed

• Record the published agent-collab 7.0.5 / runtime 5.0.7 release, exact assets, four-host installed bytes, provider-free planning, and four successful installed native carrier checks. Claude subscription restoration/live qualification remains explicitly deferred.
• Correct stale handbook descriptions of routing requests, caller-owned repository handling, opaque content, and independence verification without changing runtime behavior or governing policy.