docs: close out the 7.0.9 release

README.md

@@ -7,14 +7,16 @@ remains opaque content for the calling agent to interpret.
 
 This public repository's current source is **agent-collab** (v7.0.9).
 
-Current published release: **7.0.8** ([`v7.0.8`](https://github.com/sumitake/agent-collab/releases/tag/v7.0.8)).
-The v7.0.8 closeout is recorded in the
-[dated evidence snapshot](docs/architecture/status-and-evidence.md).
-It carries signed provider runtime `5.0.9`. Host installation, readiness, and
-provider availability remain separate evidence planes. The package README
-remains the immutable release-time snapshot; current postpublication facts
-belong in this README and the handbook. Later repository documentation does
-not rewrite the tagged release artifact.
+Current published release: **7.0.9** ([`v7.0.9`](https://github.com/sumitake/agent-collab/releases/tag/v7.0.9)),
+The v7.0.9 closeout is recorded in the dated evidence below. It carries
+signed and notarized provider runtime `5.0.12` for macOS ARM64 and
+Intel. The [dated evidence snapshot](docs/architecture/status-and-evidence.md)
+records verified publication, installation through four local host managers,
+and native Intel installation. Fresh installed checks passed for Claude
+intent, Codex and Grok repository architecture, Google repository extraction,
+and Intel OpenCode Go repository architecture. Existing conversations can
+retain their earlier skill catalog until the host reloads. The package README
+remains the immutable release-time snapshot.
 
 The human-first [architecture handbook](docs/architecture/README.md) explains
 the system boundaries and lifecycle. The package reference below is the
@@ -25,7 +27,7 @@ installation, and readiness claims separate.
 
 ## What's new - v7.0.9
 
-The staged 7.0.9 package includes signed and notarized provider runtime
+The published 7.0.9 package includes signed and notarized provider runtime
 `5.0.12` for both macOS architectures. Worker guidance distinguishes expected
 task time from the runtime's admitted-progress inactivity lease, which defaults
 to 24 hours when omitted. It shows callers how to choose a bound, retain
@@ -43,10 +45,9 @@ pricing snapshot covers the configured model records; unknown models remain
 unpriced and numeric quotas remain unknown. Bootstrap calibration warnings are
 retained.
 
-The published 7.0.8 release and its runtime `5.0.9` remain the current release
-until the staged candidate passes qualification, is merged, and is published.
-The [dated evidence](docs/architecture/status-and-evidence.md) keeps staged
-qualification, review, publication, and installed-instance evidence separate.
+The [dated evidence](docs/architecture/status-and-evidence.md) separates
+staged qualification, review, publication, and installed-instance observations.
+Earlier failed or incomplete attempts remain historical evidence.
 
 For earlier release history, see the full [CHANGELOG](CHANGELOG.md).
 
@@ -135,7 +136,7 @@ size-branded source or generated skill surface is supported.
 ## Runtime trust boundary
 
 The canonical workspace build owns the final binary and generated manifest.
-The staged 7.0.9 package carries:
+The published 7.0.9 package carries:
 
 - manifest schema 4;
 - runtime protocol 5;

changelog.d/2026-10-23-v709-documentation-closeout.md

@@ -0,0 +1,3 @@
+### Documentation
+
+- Record agent-collab 7.0.9 publication, complete installed-file verification and bounded native confirmations; align the architecture handbook and root README while preserving historical limitations.

docs/architecture/README.md

@@ -10,7 +10,7 @@ the contribution contract remain authoritative for their respective claims.
 When two generations differ, use the status vocabulary below instead of
 silently treating them as the same thing.
 
-The current published release is v7.0.8 with signed provider runtime 5.0.9,
+The current published release is v7.0.9 with signed provider runtime 5.0.12,
 manifest schema 4, runtime protocol 5, native contract 4, and wire schema 12.
 
 ## Read this handbook in order
@@ -110,7 +110,7 @@ not a public issue or pull request.
 | --- | --- | --- |
 | What does the package install? | [System context](system-context.md) | Host manifests, generated marketplaces, package tree, and distribution tests. |
 | Which workflows exist? | [Capabilities and workflows](capabilities-and-workflows.md) | `skill-specs/`, generated skills, package reference, and skill-contract tests. |
-| How are agent projects estimated? | [Project estimation](project-estimation.md) | Public request/result schemas, deterministic helper, released v7.0.8 maintenance evidence, skill checkpoints, maintenance verifier, producer-byte compatibility fixtures, and focused tests. |
+| How are agent projects estimated? | [Project estimation](project-estimation.md) | Public request/result schemas, deterministic helper, released v7.0.9 maintenance evidence, skill checkpoints, maintenance verifier, producer-byte compatibility fixtures, and focused tests. |
 | Who may review, write, or merge? | [Governance and authority](governance-and-authority.md) | Host policy, coordinator, public governance contract, PR template, and compliance checks. |
 | Is a route usable now? | [Status and evidence](status-and-evidence.md) | Installed version plus provider-free readiness on that host. Repository presence alone is insufficient. |
 | How do I install or recover? | [Lifecycle and operations](lifecycle-and-operations.md) | Current host CLI, migration doctor, verified runtime client, and migration policy. |

docs/architecture/capabilities-and-workflows.md

@@ -138,7 +138,7 @@ workflows explicitly compose the checkpoint before final presentation. A host
 without contextual skill selection uses explicit invocation and reports that
 the automatic checkpoint was unavailable. See
 [Project estimation](project-estimation.md) for modes, examples, output
-semantics, and the published v7.0.8 maintenance evidence.
+semantics, and the published v7.0.9 maintenance evidence.
 
 The packaged prior is currently an explicit bootstrap: enhancement duration is
 descriptive, bootstrap confidence cannot be high, and unsupported greenfield,

docs/architecture/claude-participation.md

@@ -75,6 +75,14 @@ claude-opus-5-5`, `execution_status: ok`, confirmed cleanup, correct
 fixture-marker answer). No existing-session reload is claimed, and no other
 Claude action is admitted.
 
+For 7.0.9, all 184 released files again match the supported host installation.
+A fresh installed document-intent request returned the exact new fixture value
+with native success, one observed attempt, zero replays, and confirmed cleanup.
+Current publisher and capability metadata also passed the separate zero-model
+readiness probe. The staged document-intent case passed before publication.
+No additional Claude action or existing-session reload is claimed; earlier
+release-specific deferrals and incomplete attempts above remain historical.
+
 ## Host and resident-primary role
 
 Claude Code remains a fully supported host: the package installs natively,

docs/architecture/lifecycle-and-operations.md

@@ -131,7 +131,7 @@ Preserve the typed coordinator response. Any later issue report is an explicit,
 separately authorized action and never grants governance authority or licenses
 replay of the provider request.
 
-`project-estimation` is offline and read-only by default. The packaged v7.0.8
+`project-estimation` is offline and read-only by default. The packaged v7.0.9
 source contains an explicit bootstrap prior: enhancement duration is
 descriptive, greenfield may return `no_compatible_prior`, and absent token
 evidence returns `unavailable_no_token_prior` rather than zero. Persist an

docs/architecture/project-estimation.md

@@ -19,19 +19,20 @@ consents to an output path.
 ## Current status
 
 The skill, helper, schemas, planning checkpoints, and release-verification
-source ship in the published v7.0.8 release. A governed, content-addressed
+source ship in the published v7.0.9 release. A governed, content-addressed
 bootstrap handoff is admitted from the frozen producer. It contains a supported
 enhancement duration hierarchy but no greenfield root and no published token,
 wait, rework, quota-delay, or marginal-cash metrics.
 
 This is production maintenance evidence in the explicit `bootstrap` state, not
 a promoted calibration claim. Its estimates are descriptive and never high
 confidence. The refreshed maintenance evidence is receipt-bound to the
-published 7.0.8 source; v6.2.0 remains the historical release that introduced
-the bootstrap. The 7.0.8 handoff is a freshly-generated receipt (dated
-2026-09-24), not a carried-forward last-good one; it does not claim newly
-promoted calibration. All four configured pricing providers resolved; exact
-numeric quota contracts remain unknown for all four.
+published 7.0.9 source; v6.2.0 remains the historical release that introduced
+the bootstrap. The 7.0.9 handoff is a freshly-generated receipt dated
+2026-10-19. Its pricing snapshot covers configured model records; unknown
+models remain unpriced and numeric quota contracts remain unknown. The
+receipt retains bootstrap calibration and coverage warnings and records the
+required operator notification. It does not claim promoted calibration.
 
 ## Mental model
 

docs/architecture/repository-and-release.md

@@ -101,12 +101,12 @@ operator notification if still unsuccessful. Expired pricing becomes
 `unpriced`; expired quota becomes `unknown`. Structural, privacy, provenance,
 integrity, schema, and material-regression failures always block.
 
-The published v7.0.8 release admits the governed bootstrap aggregate,
+The published v7.0.9 release admits the governed bootstrap aggregate,
 pricing/quota snapshots, notification, and schema-3 receipt introduced in
 v6.2.0. The enhancement duration prior is descriptive; greenfield and
 unsupported metric families remain unavailable. The bootstrap is not promoted
 calibration; the freshly-generated maintenance evidence is receipt-bound to
-7.0.8. See
+7.0.9. See
 [Project estimation](project-estimation.md).
 
 ### Policy-only

docs/architecture/status-and-evidence.md

@@ -17,7 +17,62 @@ runtime. Each has a different evidence source.
 | Runtime readiness | Provider-free evidence that the selected package and managed boundary are callable for the reported contracts. | A guarantee that provider authentication, quota, or a future request will succeed. |
 | Invocation result | The typed outcome of one bounded request. | General availability, permission to retry with wider authority, or merge approval. |
 
-## Current snapshot — v7.0.8
+## Current snapshot — v7.0.9
+
+The [`v7.0.9` release](https://github.com/sumitake/agent-collab/releases/tag/v7.0.9)
+was published on 2026-10-23 at 06:48:00 UTC. The signed annotated v7.0.9 tag object `b591102eba6f2100c607f38395d1f4e9d14bb612` identifies public commit `404ba2b31421a44749a60f59e3d44f3f867318a6`. The
+[exact release workflow](https://github.com/sumitake/agent-collab/actions/runs/39913391573)
+succeeded. Independently downloaded assets match the exact-commit canonical
+archive, checksum and SPDX metadata; the archive is also byte-identical to the
+package qualified before publication.
+
+| Published asset | Verified SHA-256 |
+| --- | --- |
+| `agent-collab.v7.0.9.plugin` | `87960564a2121d1a51f5215c1b094a3c982c245af6ef9f35b99605e34a432da4` |
+| `agent-collab-v7.0.9.spdx.json` | `41bc6a7ab54e87008b103172869ce9a07b67590624a54c74b7c7e3c4ea2cbe4e` |
+| `agent-collab.v7.0.9.plugin.sha256` | `3a4c8d5dc30c74d576844a78365159498316f6d23dee5b6cd9e231a8c91f8844` |
+
+| Observation | Status | Interpretation |
+| --- | --- | --- |
+| Package 7.0.9 contains signed and notarized runtime 5.0.12 for ARM64 and Intel. Manifest schema 4, protocol 5, native contract 4 and wire schema 12 remain unchanged. | verified release identity | OpenCode 2 compatibility and its current metadata-readiness profile are shipped. Readiness proves metadata capability; authentication and inference require live evidence. Optional Agy startup hints do not change status or returned content. |
+| Released inventory is 12 logical actions, eight logical agents, two architecture artifacts and 53 generated skills. | verified current inventory | Historical transport/source-pair counts remain historical. |
+| All 184 released files match Claude, Codex, Antigravity/Agy and Grok installations on the observed ARM host, and the native Codex-managed installation on an Intel host. All five checks preserve these file contents. | verified installed bytes | Source marketplace metadata and host-generated extras are separately accounted for; no literal whole-tree or filesystem-mode identity is claimed. Grok selects the signed v7.0.9 tag. |
+| Provider-free migration and 15-unit routing plans pass from all four ARM roots. The packaged Grok qualifier returns qualified with zero model calls; Intel routing planning also passes. | verified package readiness | This evidence is separate from provider authentication and inference. |
+| The pre-publication matrix's 14 ARM cases and one native Intel OpenCode Go case returned substantive correct content and confirmed cleanup. Additional signed Intel execution under Rosetta also succeeded. | accepted staged scope | The ARM harness's final source-purity check originally exited unsuccessfully because of an extra untracked historical manifest. The extra was preserved and adjudicated as outside the fixed load closure; all tracked source and selected runtime bytes were unchanged. The failed wrapper is retained as failed, and no native request was replayed to repair it. |
+| Fresh installed checks passed for Claude document intent, Google repository extraction, Codex/Grok repository architecture, and native Intel OpenCode Go repository architecture. | bounded installed native execution verified | Each of five new requests returned its exact fresh fixture value; repository cases also described the dependency correctly. Native cleanup, disposable-fixture removal and all 184 immutable package files were verified. Earlier failed ARM Go or legacy attempts remain unqualified; no credential repair or copy is claimed. |
+| The Intel OpenCode Go check uses native OpenCode 2.1.3 and the existing native profile. | verified native Intel compatibility | The observed model name is initial-session configuration, not response-correlated independent governance approval. |
+| Claude's sole admitted action is document intent; the fresh installed result succeeds with one observed attempt and zero replays. Current publisher/capability readiness also succeeds without model calls. | installed intent qualified | No other Claude action is admitted. Cleanup is confirmed. The caller requested no tools; the returned telemetry does not independently inventory tool/MCP activity. The retained legacy adapter's stronger tool controls are not attributed to the current carrier. |
+| No running desktop session was restarted. | existing-session catalog reload unverified | Installed-path execution does not establish that a conversation already loaded the new skill catalog. |
+| Maintenance evidence is freshly receipt-bound to 7.0.9, dated 2026-10-19. | verified bootstrap maintenance | Configured pricing records are covered; unknown models remain unpriced and numeric quotas remain unknown. Bootstrap coverage warnings and the required operator notification remain explicit. |
+
+[PR #235](https://github.com/sumitake/agent-collab/pull/235) contains the
+source, qualification and independent exact-head review evidence.
+[PR #238](https://github.com/sumitake/agent-collab/pull/238) compiled the
+canonical changelog before tagging. The additional automated security review
+was excluded from the release wait under the operator's explicit instruction;
+its unfinished result is not represented as a clean review. Required CI and
+the completed independent exact-head review passed, and both PRs merged
+through the ordinary protected path. The changelog-only PR required no new
+model review under the documented Tier 1 compiler exception.
+
+### v7.0.9 closeout determinations
+
+| Surface | Determination | Evidence basis |
+| --- | --- | --- |
+| Root README | **updated** | Published 7.0.9/runtime 5.0.12, exactly one current showcase and bounded installation/qualification facts replace staged wording. |
+| Package README | **verified current at the signed tag** | Immutable release-time snapshot; all 184 released package files remain unchanged after publication. |
+| Handbook index | **updated** | Current release, runtime and maintenance references identify 7.0.9. |
+| System context | **verified current** | Public/private ownership, single-package boundary and caller-owned integration remain unchanged. |
+| Capabilities and workflows | **updated** | Published maintenance reference is current; 53 skills, admitted actions and authority limits match the release. |
+| Governance and authority | **verified current** | Caller-owned family independence and response-correlated approval remain required where applicable; configuration-only identity does not become approval. |
+| Lifecycle and operations | **updated** | Maintenance version is current; supported native installation, pinned Grok replacement and existing-session reload boundaries match observed behavior. |
+| Repository and release architecture | **updated** | Published version-bound maintenance is current; release, installed bytes and invocation evidence remain separate. |
+| Project estimation | **updated** | Fresh 2026-10-19 receipt is bound to 7.0.9; bootstrap warnings and unknown quotas remain visible. |
+| Claude participation | **updated** | Fresh installed document-intent success and current publisher/capability metadata are recorded without widening admission. |
+| Status and evidence | **updated** | This exact release and five installed confirmations are current; earlier snapshots and failed attempts remain historical. |
+| Generated changelog | **verified current at the signed tag** | Canonical compiled section agrees with the published notes and assets, including previously merged untagged documentation fragments. This closeout adds a new fragment without rewriting generated history. |
+
+## Historical snapshot — v7.0.8
 
 The [`v7.0.8` release](https://github.com/sumitake/agent-collab/releases/tag/v7.0.8) was published on
 2026-09-24 at 07:59:58 UTC.