Ghostlight 1.3.1

Ghostlight 1.3.1

A safety fix to 1.3.0's browser recovery. The Chrome Web Store adapter stays at 1.1.0;
adapters 1.1.0 and 1.0.0 both remain compatible with this service line (ADR-0142).

Fixed

• Adopting another installation's registration now requires a deliberate install
  (ADR-0149 amendment). 1.3.0's silent repair adopted any stale Ghostlight-owned registration
  toward whichever installation crossed the no-browser seam, so a scratch build's browser call
  could rewrite the machine's real registration. Silent repair now applies only to stale
  details within the running installation's own directory; a registration owned by another
  installation is reported, never adopted, and only ghostlight install takes ownership.

Added

• The owned_elsewhere diagnosis. Recovery answers "Another Ghostlight installation owns
  the browser registration." with the native_host_owned_elsewhere fact and one next step
  teaching ghostlight install from the installation that should own the browsers. doctor
  names the owning installation's directory and marks it removed when that installation no
  longer exists, so a deleted tree becomes a visible row instead of silent breakage.
• GHOSTLIGHT_NATIVE_HOST_DIR roots the whole native-host registration surface below one
  directory for test tooling; every Ghostlight journey uses it, the CLI journey asserts the
  machine's real registration is byte-identical across its run, and the release preflight
  fails on any machine-state leak or leftover process.

Install

npx -y ghostlight@1.3.1, the NSIS installer, the Debian package, or the portable archives.
Every artifact is checksum-bound and provenance-attested; see SHA256SUMS and
release-candidate.json in the release assets.