v1.17.0

1.17.0 (2026-10-21)

Added

• one-script: a named legacy policy generator, the policy stream, and the drawn seed (flatten-2 F13) (9538eb5)
• one-script: canon.py, the canonical-bytes encodings by name (flatten-2 F7) (991279c)
• one-script: chains.py, one verifier per hash-chain shape (flatten-2 LE-6, F15) (856278b)
• one-script: diverge, the divergence finder; merge-check gate 0 (88d54c7)
• one-script: merge-check proved on the flatten-2 chunks; candidates and gate fixes (9dd2e77)
• one-script: merge-check runs tests as a non-root user, and reads a repo-local reach helper (flatten-2 residue, gate 4 + uid) (f8ee4e8)
• one-script: merge-check takes a parity_repo, and a symlinked repo beside is found (flatten-2 residue, calibration repo set) (e2f7f51)
• one-script: merge-check, the one script's merge gate (e4e78e4)
• one-script: one reach for code outside willow-bot (flatten-2 F6.5) (bccdd76)
• one-script: scrub.py, the union of what ten copies took out (flatten-2 F12) (e69f813)
• one-script: sign.py, signing and keys once (flatten-2 F14) (8b35837)
• one-script: the nine merge candidates match the residue fixes; run as non-root they pass every gate but 8 (flatten-2) (13b77e8)
• one-script: the one clock, with a named format per use (flatten-2 F8) (5bc4abc)
• one-script: the second flattening, the one script at every path (03cfd51)

Fixed

• one-script: a check-in with no box says why instead of crashing (f767d43)
• one-script: candidates' absent tests name the carried-copy tests that replaced the unreachable ones (canon, clock, sign) (46a8d26)
• one-script: diverge's behaviour tests go through merge_check's non-root runner; TERM cleans up (flatten-2 residue) (0f36f94)
• one-script: state words in diverge, merge_check and chains are states.* constants (merge of states-reverse with the residue and chains) (0c26eb4)
• one-script: the record survives a crash and a race (loose end LE1) (449a53f)
• one-script: the record takes a write lock so concurrent rows can't fork the chain (421421e)
• one-script: the unprivileged run gets a scrubbed environment; chown walks sorted (flatten-2 residue) (55a758a)
• resync the carried clock copy to the one script's reformatted clock.py (2ae3b24)

Changed

• one-script: escalated is a step, named as one (flatten-2 reverse pass on F5) (de9c882)
• one-script: the modules use states' constants everywhere, and a test holds it (flatten-2 reverse pass on F5) (82689ad)
• one-script: the one script's modules use states' constants (flatten-2 F9) (022562a)
• one-script: the pile's word rule and bite key get one home, words.py (flatten-2 F11) (5f91b99)
• one-script: the record's closure is the kernel (canon, sign) (9496e85)
• one-script: the report field names are constants, a named fourth vocabulary (flatten-2 reverse pass) (970e14c)
• one-script: willow_bot carries parity-tested copies instead of reaching the one script (flatten-2 residue, gate 6 wheel) (8b1696c)