[kikashy]

Material-decision impact: documented-claim; review: #298 (comment)

Prepare Runtime v0.36.0 notes covering the Policy functionality since the last published v0.34.0: the retained prototype and explicit proposed-draft candidate, their CLI/MCP surfaces, and compatibility and authority limits. The source was already reviewed and tested; this PR changes CHANGELOG.md only.

The existing v0.35.0 draft/tag remains held at5157249. This does not adopt the Policy RFC, change default Core/prototype behavior, publish a release/image/registry entry, or install anything. Candidate1.0.0 and prototype0.0.2 remain explicit distinct formats.

Validation: focused file/base/hash, preserved old changelog, SemVer, whitespace/UTF-8 and note checks passed. Reuse source Runtime CI39165392059 and actual combined acceptance Desk CI39275718610; required PR CI and eventual tag/archive verification remain gates. Independent Codex review uses the maintainer’s standing temporary different-vendor waiver; it is same-vendor review.

[kikashy]

Independent review accepted this exact documentation at 75743d276e1c51d51a60d3d76ffa8d034282036e, tree 287a12a9741f1860fd63867db9a55ad827156d22. Builder used GPT-6.1 Sol/high; the independent reviewer retained GPT-6.1 Sol/xhigh. This is same-vendor review under the maintainer’s standing temporary different-vendor waiver, not a different-vendor attestation.

No open P1/P2. The53-line CHANGELOG addition correctly describes cumulative functionality since publishedv0.34, preserves the existing heldv0.35 entry, and distinguishes prototype0.0.2, explicitly selected proposed-draft candidate1.0.0, and Review/unadopted RFC status. Exact changelog hash cef804a995bd327442ccdca0867337b3a201af291c0056af82e044873a914009 was verified. No executable or contract change.

Focused static/base/hash/link/whitespace checks passed; the independent reviewer reused them without tests/builds/network repetition. Existing Runtime CI39165392059, native Runner CI39270753757 and real combined Desk CI39275718610 remain source evidence. Required PR CI and tag-time archives/native smoke/checksums/attestations are separate pending gates. Runtimev0.35.0 remains held; no publication, OCI/MCP action, live installation or enrollment is approved by this review.

[github-actions]

🎉 Thank you for your contribution to Judgment Pack!

If you’d like another task, choose a path that interests you:

• Go runtime
• Judgment desk
• Gateway and provenance
• Python and evaluator experiments
• Specification and documentation