Prepare v0.1.0-alpha.5 release candidate

[VladimirBrejcha]

Summary

• bump public install, package, support, and release-contract surfaces to v0.1.0-alpha.5
• preserve the immutable Alpha4 failure record and document the bounded RR19-RR23 recovery work
• pin the Formula and Cask to the frozen CLI and notarized app candidates

Verification

• full repository suite: public surface 262, broker core 294, client 257, harness adoption 24, app 171
• committed-tree spec-only profile: passed with no warnings
• public-source, raw archive, checksum/pin, Developer ID, notarization, stapler, Gatekeeper, and two independent frozen-byte audits: passed

Release boundary

This PR prepares the candidate only. No tag, GitHub Release asset, tap update, or live installation is part of this change.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-08-31T18:46:38.009000Z	bbdb5bc	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[fiveonecode-autopilot]

Autopilot needs your choice — AD-20260901-001

Review finding (External review):
The active PR changes a guarded verifier or bootstrap implementation file.
Autopilot will not run HEAD verifier code or HEAD bootstrap until this exact implementation identity is authorized.
Keep-blocked does not run old product source; it refuses HEAD verifier/bootstrap and does not push.

Concrete operator choices:

• Authorize this contract change: accept HEAD implementation, then Autopilot may run HEAD verifier and HEAD bootstrap.
• Keep blocked until HEAD reverts: leave the PR blocked; Autopilot must not push, must not run HEAD bootstrap, and must not run HEAD verifier.

Implementation identity (paths and blob SHAs):
package-lock.json@f96907ab5cdf0884985126f1da1d80a6c32fcc11..afcdec3f64734374e0ee4a791998a3075c5f89c1;package.json@277044cdf2d58a570c00a687eca19c0b6de110c6..8725fd461303fe77816b2741c476371d3afa8955

Guarded hits:

• package-lock.json (base blob f96907ab5cdf0884985126f1da1d80a6c32fcc11, head blob afcdec3f64734374e0ee4a791998a3075c5f89c1)
• package.json (base blob 277044cdf2d58a570c00a687eca19c0b6de110c6, head blob 8725fd461303fe77816b2741c476371d3afa8955)
  Prepare v0.1.0-alpha.5 release candidate #40

Autopilot's assessment:
The active PR changes a guarded verifier or bootstrap implementation file.
Autopilot will not run HEAD verifier code or HEAD bootstrap until this exact implementation identity is authorized.
Keep-blocked does not run old product source; it refuses HEAD verifier/bootstrap and does not push.

Concrete operator choices:

• Authorize this contract change: accept HEAD implementation, then Autopilot may run HEAD verifier and HEAD bootstrap.
• Keep blocked until HEAD reverts: leave the PR blocked; Autopilot must not push, must not run HEAD bootstrap, and must not run HEAD verifier.

Implementation identity (paths and blob SHAs):
package-lock.json@f96907ab5cdf0884985126f1da1d80a6c32fcc11..afcdec3f64734374e0ee4a791998a3075c5f89c1;package.json@277044cdf2d58a570c00a687eca19c0b6de110c6..8725fd461303fe77816b2741c476371d3afa8955

Guarded hits:

• package-lock.json (base blob f96907ab5cdf0884985126f1da1d80a6c32fcc11, head blob afcdec3f64734374e0ee4a791998a3075c5f89c1)
• package.json (base blob 277044cdf2d58a570c00a687eca19c0b6de110c6, head blob 8725fd461303fe77816b2741c476371d3afa8955)

Autopilot recommends:
Authorize this verifier implementation change — Autopilot will accept this exact HEAD verifier/bootstrap implementation identity, then may run HEAD verifier and HEAD bootstrap.

Choose what Autopilot should do next:

1. authorize-contract-change — Autopilot will accept this exact HEAD verifier/bootstrap implementation identity, then may run HEAD verifier and HEAD bootstrap.
2. keep-blocked-until-head-reverts — Autopilot will leave the PR blocked until HEAD reverts the guarded implementation. It will not push, will not run HEAD bootstrap, and will not run HEAD verifier.

Reply with exactly one:
Autopilot decision AD-20260901-001: choose authorize-contract-change
Autopilot decision AD-20260901-001: choose keep-blocked-until-head-reverts

Local artifact: job 20260901-023950-d8e784db-e74b-49a3-99b7-d98b1adbd9c8/report.md

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: bbdb5bc9b7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[VladimirBrejcha]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: bbdb5bc9b7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[fiveonecode-autopilot]

Autopilot recorded decision AD-20260901-001: selected authorize-contract-change.

Operator: @VladimirBrejcha

[fiveonecode-autopilot]

Reviewed top-level PR feedback and left the current code unchanged.

These items were posted as PR review bodies or conversation comments rather than unresolved review threads, so this acknowledgement is recorded on the PR timeline.

• Source: Prepare v0.1.0-alpha.5 release candidate #40 (comment)
  This comment is Codex's review-status dashboard for HEAD bbdb5bc. It reports that Code Review completed on a manual request and lists no findings, defects, or requested changes. A completed no-findings Codex review summary does not require a repository change.
• Source: Prepare v0.1.0-alpha.5 release candidate #40 (review)
  This review body is Codex boilerplate for commit bbdb5bc. It adds no independent finding. The associated inline comment asked to rewrite the commit with Why:, Changed:, Verification:, Affected:, Refs:, and Session: sections, but GitHub commit bbdb5bc already contains those exact headers. No commit rewrite is needed.
• Source: Prepare v0.1.0-alpha.5 release candidate #40 (review)
  This review body is Codex boilerplate for commit bbdb5bc. It adds no independent finding. The associated inline comment asked to restore structured sections on fb9abbf, but that SHA is not in this PR; the only commit is bbdb5bc, whose message already has Why:, Changed:, Verification:, Affected:, Refs:, and Session:. No commit rewrite is needed.