[kikashy]

Prepares v0.12.0 per docs/releasing.md. Milestone v0.12.0. No tag or release is made here: after merge, the push-triggered mutation table must finish green on the merge commit before the tag.

What changed

• Version. packages/harness/package.json and the packages/harness entry of package-lock.json: 0.11.0 → 0.12.0.
• Release notes docs/releases/v0.12.0.md: names the tag on its first line, the Go module and go/v0.12.0, links the host upgrade guide and the dependency inventory at blob/v0.12.0. Scope: Desk adoption: define supported taxonomy/runtime route for graph rehearsal #241 (PR ADR-0027 amendment: a rehearse check sub-kind for non-binding rehearsal, with paired vectors (#241) #244), Rejected external receipts remain retrievable through canonical context tools #242 (PR Quarantine an external result until its receipt verifies: no retained bytes, no reader, no Plan step before verification (#242) #247), Dialect factory bounds exclude accepted Desk collections with complete original inventories #243/Complete retained-inventory index still exceeds the 2 MiB cap for an accepted Desk collection #252 (PRs Dialect authoring: carry the complete original inventory by digest and page declarations through the read port (#243) #250, Dialect authoring: a two-level inventory index whose top level is bounded for every accepted collection (#252) #256), Run leases and effect-host fencing for unattended executions #223/Run leases: bind effect-host certification to the admitted instance and test expiry on the fenced commit paths (#251 review) #253 (PRs Run leases and effect-host fencing for unattended runs: owner, authoritative expiry, monotonic epoch, fence at commit and admission (#223) #251, Run leases: bind effect-host certification to the admitted instance; test expiry on the fenced commit paths (#253) #257), the CI timeout CI: the adapter package's -race run sits at the 20-minute timeout on hosted runners #254 (PR CI: give the race step's packages 40 minutes on slow hosted runners (#254) #255), and the lockfile advisory fix PR Lock @hono/node-server at 2.1.5 (GHSA-rmxm-3fg6-px4f) #245 (@hono/node-server 2.1.1 → 2.1.5, GHSA-rmxm-3fg6-px4f), which is in v0.11.0..main without a milestone. The host-review section states the dialect authoring break, the bound and the host's obligation, receipt quarantine, leases, and the rehearsal sub-kind. The review statement: built and reviewed by Claude Opus with clean rooms and security clean rooms per PR, same-vendor review, not a cross-vendor claim.
• Host upgrade guide docs/upgrade/v0.12.0.md: record format changes (dialect draft version 2, new run-lease.json version 1, rehearse enum value) and the migration for each.
• ADR status lines. ADR-0025: the top status says decision 1 is built in v0.12.0 and decisions 2–8 (Durable waits and parked approvals, budgets and questions #224–Durable goal commands without a model turn #230) are not; the Run leases and effect-host fencing for unattended executions #223 amendment gains "Status: accepted for v0.12.0 (Run leases and effect-host fencing for unattended executions #223, Run leases: bind effect-host certification to the admitted instance and test expiry on the fenced commit paths (#251 review) #253)". ADR-0027: the rehearse amendment gains "Status: accepted for v0.12.0. Issue Desk adoption: define supported taxonomy/runtime route for graph rehearsal #241." ADR-0028 and the ADR-0027 receipt amendment already read "accepted for v0.12.0". The repository has no ADR index and no CHANGELOG; the notes are the release record.
• docs/releasing.md: the go-race paragraph said 20 minutes per package; dev.json has set 40 since CI: give the race step's packages 40 minutes on slow hosted runners (#254) #255.

Release-gate decisions (second commit)

The maintainer decided the three gates on 2026-10-30 (decision):

• Live answer comparison deferred for v0.12.0 only: new "v0.12.0 scope decision" in docs/release-quality.md; the notes disclose that no live comparison passed and no answer-quality, token-saving or cost result is claimed.
• Go advisories GO-2026-5781 / GO-2026-5932: the exception is extended to v0.12.0 and go/v0.12.0 in the release notes, as v0.11.0 recorded it (no Go module dependency changed; expiry stays 2026-11-07). No workflow reads this record: the release workflow has no Go advisory gate, and the disposition is a release-review record (docs/security/dependency-policy.md).
• Runner image exception not extended. Its scope in .github/ci-evidence.json refuses every tag but v0.11.0 (image_exception(...) returns image-exception-tag for v0.12.0, checked against the old config), so the scope is removed and the evidence gate verifies with exact matching. test_repository_config_carries_no_image_exception_after_v011 replaces the approval-bytes test; with the scope put back it fails at its assertion. docs/ci-evidence.md says so; the approval record stays as history.

Checks for the second commit (.github/ci-evidence.json is unmapped, so CI runs the whole list): generated-docs, contract, local-paths, agent-docs, diff-check and python-tests (182 tests, OK) passed locally; check-upgrade-guides.py --tag v0.12.0 passes.

Checks

Candidate: head 42d440e (one signed-off commit on 07b806b), no uncommitted diff. jpdev check --changed origin/main selects the whole list (30 checks) because package-lock.json is unmapped. It ran in two passes for the memory caps: Go steps under ulimit -v 8 GB, except go-test, go-race and harness-check (eino and certification) at 12 GB. Node 22.23.1 under the kit's resident-memory cap, Go 1.26.10 (the manifest's), Python 3.12.11. Parity against the Desk at desk_pin d9251ec; gateway receipts against the pinned Gateway 55e2d15.

PASS generated-docs · record-shapes · contract (445 JSON documents) · local-paths · agent-docs · diff-check
PASS python-tests (182 tests) · dependency-audit · release-quality · mutation-rows (560 rows, 0 problems; 5 retired)
PASS build · release-quality-engine · packed-smoke · reference · unit-tests
PASS certify-vercel · certify-codex · certify-deepagents · differential · gateway-receipt-process
PASS go-module-path · gofmt · go-vet · go-generate · parity (every difference is named)
PASS go-test · go-race (790 s) · harness-check (202 legs, 94 agent checks)
SKIP dependency-audit-live (needs DEPENDENCY_AUDIT_LIVE)
FAIL gateway-receipts: local only; its vitest leg cannot instantiate WebAssembly under the Go step's
     ulimit -v (8 GB and 12 GB both: "Cannot allocate Wasm memory"); the Go producer and consumer legs passed
== 28 passed, 1 failed (local cap), 1 skipped ==

The first pass also caught a stale docs/dependencies.md (the lockfile digest after the version edit); it is regenerated in this commit and generated-docs passes. gateway-receipts, dependency-audit-live and the exact-head checks belong to CI on this PR; the full mutation table belongs to the push to main after merge.

🤖 Generated with Claude Code

[github-actions]

🎉 Thank you for your contribution to Judgment Pack!

If you’d like another task, choose a path that interests you:

• Go runtime
• Judgment desk
• Gateway and provenance
• Python and evaluator experiments
• Specification and documentation
• Agent harness and adapters