[renmengye]

Release candidate 0.6.0rc1, for a fleet test before 0.6.0. Per RELEASING.md, [Unreleased] stays in place for an rc.

Version bump only: __version__, CITATION.cff (version and date) and the pinned-version test.

In this rc (since 0.5.0):

• Traceable results: a hash-chained per-run trajectory (Per-run trajectory: a kernel-written, hash-chained event timeline #573, Trajectory follow-up: wall-clock timestamps; ending ref matches the steward's report #575) recording:
  • measurement provenance: ruler, image digest, result-file hashes (Trajectory step 2: measurement provenance; pending ledger reader tolerates new fields #586);
  • tool calls from session logs (Trajectory step 3: tool.call events from native session logs #593);
  • a report-only number check in the PR (Trajectory step 4: report-only number check in the PR body #594);
  • an HMAC attestation at run end (Trajectory step 5: HMAC attestation of the chain head at run end #595).
  • It also reports refusals per run for the release canary (Protocol friction from the trajectory: refusals per run by author model (#487 part 3) #577).
• Agents: sibling-hypothesis notices at wake (Notify an agent when a sibling's hypothesis is new or changed (#360 part 2) #579); agent-facing text inventory and lint (Agent-facing text: one inventory and a wording lint (#487) #574); the panel accepts measured composite changes (Review panel accepts measured composite changes (#489) #590, Review panel: allow composite changes when each component is measured and only the combination clears the floor #489).
• Setup: Claude sessions on a subscription token, with judges on --safe-mode (Claude sessions on a subscription token (claude setup-token); token judges run --safe-mode #580); the Claude Code and Codex plugin (Plugin for Claude Code and Codex: set up, write the contract, operate (#562) #578, Plugin setup skill offers a Claude subscription token #583); macOS Seatbelt containment (macOS containment: run sessions and evaluations without an image under a Seatbelt profile #572).
• Smaller: a priced lower bound in status (Status shows a priced lower bound when some legs are unpriced (#516) #591), a shared artifact-path validator (One artifact-path validator for the kernel and the syscall tool (#337) #592), and test-suite streamlining under Streamline the test suite: fewer, behavior-focused tests #497.

State that outlives a release (each PR carries its compatibility statement and fixture):

• trajectory file (new): older kernels ignore it; old runs read as "no trajectory".
• session events gain role: older events count as author sessions.
• inbox: new sibling: note keys use the existing note kind.
• ledger: pending records are unchanged; the reader now ignores unknown fields (forward compatibility for 0.7).
• review envelopes: head_sha added; old envelopes still post.

Step 3 of the release checklist (refusals per run from the canary) applies to the fleet test before 0.6.0.

Gate: ruff check, ruff format --check, mypy, pytest (3082 passed, 7 skipped).

Prepared by Claude.

[github-actions]

Round 1 — reviewed head 10f86638 — reviewer hermes/gpt-5.6-terra.

terra
Advisory findings from outerloop — the code owner decides. Reply to disagree; the outerloop:no-review label opts this PR out.

Verdict: no defects found.

[github-actions]

Round 2 (re-run on the same head) — reviewed head 10f86638 — reviewer summarizer:hermes/gpt-5.6-terra over coverage+credentials+deployment+general+lifecycle+prose.

terra
Advisory findings from outerloop — the code owner decides. Reply to disagree; the outerloop:no-review label opts this PR out.

Verdict: no defects found.

No findings were reported by any review lens. Rejected findings: none.