Sol Control v0.4.1

修复内容 / Fix

修复 Codex Desktop 中的身份握手死锁。Desktop 子 Agent 无法观察自己的模型和 reasoning effort，v0.4.0 因要求 child 自证而正确返回 unproven 并 Fail Closed。

v0.4.1 改为由权威 Host/tool 角色映射和父线程启动记录证明 agent、model、effort 与 fork_turns; child 只证明权限边界、运行约束和零副作用。无法取得 Host 权威证明时仍然 Fail Closed。

This release fixes the Desktop identity-handshake deadlock. Exact agent/model/effort/fork proof now comes from the authoritative Host/tool mapping and parent launch record; the child reports only permissions, operational constraints, and zero side effects. Fail Closed remains mandatory when Host proof is unavailable.

验证 / Validation

• Local: scripts/validate.sh PASS; 113/113 tests PASS; installation consistency PASS
• POSIX tag CI: Ubuntu + macOS, Python 3.11/3.13 PASS
• Windows tag CI: Windows Server 2022 + windows-latest, PowerShell 5.1/pwsh PASS
• Desktop Sol handshake and final review: PASS

边界 / Boundary

Desktop Sol handshake and final review are verified. Desktop nested worker dispatch was not exercised by this acceptance run and remains unproven.

Full diff: v0.4.0...v0.4.1