v3.35.0

simplicio-loop v3.35.0

Large multi-agent push closing the P0/P1/P2 backlog opened by #183/#283-#296.

Highlights

• Multi-device protocol (#286): atomic claim/discovery over a real remote queue, worker heartbeat/cancellation, receipt verification on both client and server sides, an installable worker/supervisor/queue-server console-script surface, a doctor.py LOCAL_ONLY/REMOTE_READY/REMOTE_MEASURED tri-state, and a real 2-process HTTP-loopback E2E.
• Multi-LLM routing (#287): deterministic model registry/router with fallback and circuit-breaker, task-contract routing fields, runtime-execution-receipt, and real CodexRuntimeDriver execution (codex exec, verified receipt).
• Pipeline convergence (#288): fail-closed receipt verification, heartbeat-guarded dispatch, MergeExecutor with reconcile-after-merge and chaos-tested crash recovery, multi-PR batch fan-in, and evidence-gated delivery wired into the real dispatch path.
• Security (#289): enumerated environment allow-list, short-lived HMAC credentials with revocation and per-operation scoping, DNS/TLS-pinned secure transport with live fault-injection tests, structured audit logging, CODEOWNERS coverage.
• Delivery truth (#290): fail-closed source-state verification, paginated GraphQL queries, byte-level release-artifact verification, branch-reachability/issue-state/TTL-freshness checks, deployment verification, and a cross-receipt commit-binding gate.
• Intake contract (#284), GitHub lifecycle adapter (#285), quality gate (#283), CI-less local determinism (#291), release/supply-chain tooling (#292), transactional installer (#293), repository governance (#294) — see CHANGELOG.md for full detail.

Known, documented gaps (not fabricated as resolved)

• Genuine two-physical-machine E2E for the multi-device protocol — single-machine sandbox during development.
• Claude-side real execution for multi-LLM routing — blocked by an organization policy in the development environment (Codex-side is measured).
• OIDC/Trusted Publishing — no CI identity provider since GitHub Actions was removed from this repo; a local-provenance substitute is documented in docs/SUPPLY_CHAIN.md.
• GPG release signing — no signing key configured in this environment; checksums/SBOM/provenance are still real and verifiable.
• Actual git-history size reduction — a dry-run-only migration plan (docs/HISTORY_MIGRATION_PLAN.md) is ready; execution requires a separate, explicit maintainer approval per its own safety design.

Verification

• Full local gate: scripts/claims_audit.py 13/13 PASS, scripts/token_budget.py PASS.
• scripts/release_rehearsal.py ran clean end-to-end against this exact commit (364cf794).
• Wheel/sdist built, checksums generated and verified, SBOM and local provenance generated and cross-checked, install-smoke tested in a fresh venv.