[kikashy]

Prepare Runner v0.24.0 notes for exact operational payloads, executor ownership and explicitly opted-in local manual Policy admission. Correct linked capability/ownership/payload prose that still described the earlier ownership-only v2 response and an unused codec; supported hosts now advertise the scoped v3 profile and the manual gate uses the codec.

No executable, wire, storage or permission semantics change. The profile remains experimental and restricted to immutable manual single-Pack jobs. Exact source acceptance, logical-start ordering and no-replay behavior are distinguished from pending archive/installed acceptance. Published Desk pins and held Runtime v0.35.0 remain unchanged.

Validation: focused file/base/hash, SemVer, relative-link and whitespace checks passed. Independent review accepted the release notes and verified the completed linked-doc correction; no P1/P2 remains. Existing native Linux/macOS CI39270753757 and combined Desk CI39275718610 are reused; required PR/tag/archive checks remain separate. Review is same-vendor under the maintainer’s standing temporary waiver.

Review record: #162 (comment)

[kikashy]

Independent review accepted this exact documentation at 634d6052eaed37c846e49c549ad90247cb48b4ee, tree d3e9c7d3e947a071c90957bd709b3c7a84dbed0a. Builder used GPT-6.1 Sol/high; the independent reviewer retained GPT-6.1 Sol/xhigh. This is same-vendor review under the maintainer’s standing temporary different-vendor waiver, not a different-vendor attestation.

No open P1/P2. Notes cover exactly the four source commits since publishedv0.23 and preserve explicit opt-in/profile/exclusion, exact original-input/key, ownership lifetime, one-use fresh commitment, no-replay and logical-start limits. One P2 was closed: README and linked ownership/payload pages still described only v2 and an unused codec. The accepted three-file prose delta distinguishes unsupported-host ownership-onlyv2 from scopedv3 manual admission and names the actual caller without granting authority. Release notes are unchanged; no executable/config/schema/wire change.

Focused static/base/hash/link/whitespace checks passed; the independent reviewer reused them without tests/builds/network repetition. Existing Runtime CI39165392059, native Runner CI39270753757 and real combined Desk CI39275718610 remain source evidence. Required PR CI and tag-time archives/native smoke/checksums/attestations are separate pending gates. Runtimev0.35.0 remains held; no publication, OCI/MCP action, live installation or enrollment is approved by this review.