LunaVLA v2.0.0 — Stable CPU teaching and evidence release

LunaVLA v2.0.0 freezes and releases the reviewed v2 teaching/research bridge on signed source commit 72b052864229661e1d5e1ff7692966630b84d9af. The stable source tree is identical to protected v2@40ec92eb4a8e4340acd42e3566a7d31cea0b0933.

Authoritative post-merge gates:

• stable evidence + real LeRobot integration: https://github.com/xiaoms22/lunavla/actions/runs/29132868486
• Fast CI: https://github.com/xiaoms22/lunavla/actions/runs/29132857148
• V2 CPU: https://github.com/xiaoms22/lunavla/actions/runs/29132857151
• CodeQL: https://github.com/xiaoms22/lunavla/actions/runs/29132857168

Evidence scope:

• the canonical language and visual designs were rerun after merge for exactly 15 training runs and 960 arm-episodes;
• seed-11 language and image reruns reproduced checkpoint, configuration, data, and metrics hashes exactly;
• the pinned official LeRobot PushT episode and headless gym-pusht adapter passed on the same source SHA with verified GitHub/Sigstore provenance;
• the combined archive contains full outputs, review snapshots, frozen contracts, distributions, environment, SBOM, integration provenance, and internal checksums.

Claim boundary:

• Instruction-following has not yet been established.
• Visual-control contribution has not yet been established.
• The LeRobot integration proves adapter connectivity only; it is not a PushT performance claim.

CPU Linux is the authoritative supported evidence environment. CUDA remains an experimental manual path and is not claimed as verified. This release is not a real-robot, production deployment, or PushT benchmark release. No package is uploaded to PyPI.

Verification:

1. Download lunavla-v2.0.0-release-assets.tar.gz and lunavla-v2.0.0-release-assets.SHA256SUM.
2. Run sha256sum -c lunavla-v2.0.0-release-assets.SHA256SUM.
3. Extract the bundle, enter release-assets/, and run sha256sum -c SHA256SUMS.
4. Verify provenance with gh attestation verify SHA256SUMS --repo xiaoms22/lunavla.

The convenience bundle preserves the workflow artifact directory layout that GitHub otherwise flattens for individual release assets. The inner SHA256SUMS and release subjects retain the authoritative GitHub/Sigstore provenance from the stable workflow.