v0.2.6

Added

• Local checkpoints can compare exact dirty-file content across work sessions;
  unavailable checkout snapshots are rejected instead of stored as baselines.
• Optional Local verification pins bind @check criteria to reviewed commands.
  Observed JUnit runs record selected test cases and watched-input freshness.
• Declared source lineage supports exact-pair artifact impact inspection and
  identifies bounded overlap between open work items. Unknown legacy source
  inventories remain unavailable; malformed lineage arrays are rejected
  rather than silently dropped.
• Human acceptance can bind an immutable basis of the selected verification,
  checkpoint, and impact material. Legacy decision fields remain absent when
  this enhanced basis is not required.

Improved

• Local resume shows newer artifact versions without changing approved scope,
  distinguishes missing or unavailable evidence, and keeps large path deltas
  compact unless detail is requested.
• IDE installers include supplemental skill references and diagnose missing
  reference files. Codex configuration updates preserve unrelated TOML,
  marketplace metadata, and file permissions; uninstall preserves user-owned
  references and shared marketplace configuration.
• CLI, Doc Registry, agents, UI, and release-image dependencies were refreshed.

Fixed

• Selected JUnit failures retain the CLI-observed reason through delivery
  submission, persisted evidence, and status readback, including missing tests.
• Local doctor diagnoses a logged-out identity without selecting one and
  reports the actual store it opened.
• Artifact inline diffs enforce comparison and render budgets; oversized
  documents remain available through version source inspection and copy.

Security

• Appliance supervisor state is root-owned, restart counters are validated
  before arithmetic, and diagnostic temporary files are created exclusively.
  Unsafe existing state links are rejected without deleting operator data.
• Git origin credentials are removed from new receipts and projected exports;
  Gemini embedding credentials no longer appear in request URLs or errors.
• Windows browser opening uses the native API instead of a command shell and
  requires an absolute HTTP(S) URL without control characters.

Upgrade notes

• The first enhanced Local write backs up and upgrades the entire Local store.
  Older CLIs cannot write that store; portable and handoff v1 exports refuse
  enhanced records instead of silently losing them. Back up before upgrading.
• Refresh CLI-managed IDE files with specgate plugins install and start a
  new IDE session. Native marketplace installations should update through
  their own plugin manager.