chore(release): prepare 0.1.13

Author: root

RELEASE_MANIFEST.json

@@ -1,10 +1,10 @@
 {
   "$schema": "https://agentnet.invalid/schemas/release-manifest-v1.json",
   "manifest_version": "1.0",
-  "snapshot_date": "2026-07-17",
+  "snapshot_date": "2026-07-18",
   "release": {
     "name": "agentnet",
-    "version": "0.1.12",
+    "version": "0.1.13",
     "profile": "self_hosted_local_conformance_candidate",
     "status": "BLOCKED",
     "production_ready": false,
@@ -32,12 +32,12 @@
   },
   "dependency_lock": {
     "path": "uv.lock",
-    "sha256": "9134e0f5fc12c080fe19bca76038a4cf174505fa43fc7554359db6a2d7e93926",
+    "sha256": "98bf7cf769716eacbfdea3a168f9f2f65ab1f6d91c52414532115c93d59f4e55",
     "format_version": 1,
     "revision": 3,
     "pyproject": {
       "path": "pyproject.toml",
-      "sha256": "69a0513c1225535a76ccb9734e49861b697f2adf3d56c6683d9995ca33d51d5e"
+      "sha256": "9905bfdcf04c1d455cba115cebe1412159645dfe253b7eca24d8654b74cc2e60"
     },
     "direct_dependencies": {
       "build": {
@@ -217,11 +217,11 @@
     },
     "docs/GATE_EVIDENCE.md": {
       "path": "docs/GATE_EVIDENCE.md",
-      "sha256": "9f80d8775bb4538d36230a2bbace15345f1beb4eff7ab933359b3a42ecde555b"
+      "sha256": "cc26fa01f98c71164e0d6df0dd07454f8e3fa9f1986b0def384a8feb7367c050"
     },
     "docs/RELEASE_MANIFEST.md": {
       "path": "docs/RELEASE_MANIFEST.md",
-      "sha256": "36439cbf30835e209a03aced68af1ad146b218d878dd8f7a60df8dbb06deb09a"
+      "sha256": "4372bbcbcfc1c08195ddf09dee77c14c576eaef64e45df28fa9a9cbf56678875"
     },
     "evidence/gates/G01/2026-07-13-installed-harnesses/manifest.json": {
       "path": "evidence/gates/G01/2026-07-13-installed-harnesses/manifest.json",
@@ -245,13 +245,13 @@
     },
     "scripts/verify_release.py": {
       "path": "scripts/verify_release.py",
-      "sha256": "6adf782c22e29e0bb88d3639a9c417746fbfa1bd1395a942d405afa44fb31171"
+      "sha256": "c2b607ec0697f1100664c224060626c4c55ac193646eedcdd17e500db04cc1ff"
     }
   },
   "release_source_tree": {
     "path": "src",
     "algorithm": "sha256(path NUL bytes NUL)",
-    "sha256": "58b72be69b61cef163068581cc40bbaa97a5dfafb7446774e43c3dd405a295a0"
+    "sha256": "b60207252c36fc0cfcc453cb1a11f8473a1513769e76d38023ffe796075a5488"
   },
   "protocols": {
     "a2a": {
@@ -410,7 +410,7 @@
     },
     "supervisor_harness_lifecycle": {
       "status": "BUILD_OWN_INTEGRATION",
-      "pin": "agentnet-0.1.12",
+      "pin": "agentnet-0.1.13",
       "boundary": "Exact human plus harness binding and foreground isolation remain owned."
     },
     "a2a_gateway": {

docs/GATE_EVIDENCE.md

@@ -47,6 +47,7 @@ Gate statuses used here:
 | npm `0.1.11` recursive-generation repair candidate | Deterministic one-second conversation retry reproducer; exact relay and internal-invitation repeated-run reproductions; explicit-deadline negative test; coherent relay/invitation test clocks; stable approval-purpose config serialization; model-diverse critic and constitution review plus bounded `claude -p` clock analysis; broad and repeated regression runs; release verifier; two independent `SOURCE_DATE_EPOCH=1580601600` builds; explicit source → pack/install generation 1 → repack/install generation 2 verification | Conversation/relay/assignment focused suites `56 passed`; relay target `100/100` repeats; activation serialization `100/100` repeats; internal-invitation HTTP target `100/100` repeats; code-regression corpus `1079 passed, 7 expected PostgreSQL skips`; unfiltered local run `1106 passed, 2 preserved G01 failures, 7 expected PostgreSQL skips`; complete `npm run check` PASS with source and both installed npm generations each reporting `1030 passed, 7 expected PostgreSQL skips`; package check, release verifier, compile, and reproducible-build comparisons PASS on 2026-07-17 | Minimal production change reuses the stored encrypted canonical conversation deadline only for exact omitted-deadline proposal retries; explicit caller deadline changes still conflict. Relay and invitation production freshness remain unchanged at 300 seconds; only test fixtures now use coherent clocks. Config change only sorts an unordered approval-purpose set during serialization. No current mutation-authorized PostgreSQL, live enrollment, real passkey, first signed message/reply, activation, company data, publication, or cutover evidence is promoted. |
 | `0.1.12` cross-platform implementation, pre-version real-host gate | GitHub Actions run `29610467753` at commit `6d7834e`; pinned Node `24.18.0`, uv `0.11.28`, CPython `3.13.13`; platform contracts; package check; npm pack/install; direct launcher execution from unrelated cwd | Ubuntu `13 passed, 8 skipped`; macOS `15 passed, 6 skipped`; Windows `17 passed, 4 skipped`; package check and packed install/launch passed on all three hosts on 2026-07-17 | P-shaped exact-host evidence for package launch, canonical state, portable SQLite, macOS peer/read-only-pipe/link denial, Windows SID/DACL/reparse/named-pipe/replay/capability-theft/Job cleanup, and host-gated imports. This is not signed installer/update/uninstall/rollback, privileged hostile same-account/path replacement, semantic harness, clean-worker, production, enrollment, activation, company-data, first-message, or cutover evidence. Package metadata at this pre-version commit still read `0.1.11`; final `0.1.12` evidence binds the frozen release source separately below. |
 | npm `0.1.12` cross-platform candidate | Real-host gate above; DeepSeek security and GLM constitution review with repairs; local unfiltered suite; exact installed-harness probe; release verifier; two independent `SOURCE_DATE_EPOCH=1580601600` builds; explicit source → pack/install generation 1 → repack/install generation 2 verification | Unfiltered local `1122 passed, 15 expected host/PostgreSQL skips`; installed deterministic harness `8 passed`; source, generation 1, and generation 2 each `1043 passed, 15 expected skips`; package check, release verifier, recursive package gate, and reproducible Python builds PASS on 2026-07-17 | H/L and bounded ordinary-runner P-shaped evidence only. Cross-platform installation creates no identity or authority. No current mutation-authorized PostgreSQL, signed native installer/update/uninstall, privileged hostile-host campaign, semantic clean-worker inference, live enrollment/passkey, independent production host, first signed message/reply, activation, company data, publication, or cutover evidence is promoted. |
+| npm `0.1.13` canonical onboarding prompt candidate | Canonical-template commit `2dc177c`; pre-release critic and constitution review; focused npm/release conformance; release verifier; two independent `SOURCE_DATE_EPOCH=1580601600` builds; complete `npm run check` source → pack/install generation 1 → repack/install generation 2 verification | Reviews PASS; focused release/package conformance `30 passed`; source, generation 1, and generation 2 each `1043 passed, 15 expected host/PostgreSQL skips`; package check, release verifier, recursive package gate, canonical prompt markers, and byte-identical Python builds PASS on 2026-07-18 | Documentation/skill and regression correction only: one canonical public fresh-laptop prompt is required and unresolved public metadata blocks issuance. The template itself grants no enrollment, approval, authority, messaging, activation, deployment, restart, production, or cutover permission. No mutation-authorized PostgreSQL, live blank-laptop ceremony, passkey, first signed message/reply, company data, npm publication, or production evidence is promoted. |
 | OIDC validated-address transport repair | `UV_CACHE_DIR=/tmp/uv-cache uv run pytest -q tests/identity/test_oidc_enrollment.py tests/operations/test_fail_closed_config.py tests/production/test_deployment_config.py` | 53 passed, 0 failed on 2026-07-15 | H only: includes the real `_PinnedHTTPSConnection` socket path under a validation-to-connect DNS-answer change, exact TCP address/SNI/Host assertions, proxy/tunnel and redirect denial, response bounds, unsafe address-class rejection, invalid resolver type handling, private IPv4/IPv6 pins, configuration, and deployment wiring. No real IdP/TLS service or independent approval boundary is claimed. |
 | Independent WebAuthn-UV approval component | `UV_CACHE_DIR=/tmp/uv-cache uv run pytest -q tests/approval`; approval-consumer lane; non-gate full regression below | 12 focused passed; 144 approval/consumer passed; included in 1049-pass broad lane on 2026-07-15 | H only: strict owner-only config/key custody, exact SQLite catalog/tamper rejection, UV-required maintained-library call contract, exact display/digest, bounded duplicate-rejecting HTTP, one-receipt response-loss retry, committed denial/expiry audits, rejection, credential revocation, loopback serving, and non-authorizing provisioning. WebAuthn verification is seam-controlled in hermetic tests; no real authenticator, independent host/device/operator, TLS proxy, rotation/recovery drill, or owner decision is claimed. |
 | Prior `0.1.8` candidate, unfiltered local run | `UV_CACHE_DIR=/tmp/uv-cache uv run --extra test pytest -q` | `1087 passed, 2 failed, 7 expected PostgreSQL skips` on 2026-07-16 | Both failures were preserved environmental G01 gates. This was not a passing unfiltered release run and is not current `0.1.9` evidence. |

docs/RELEASE_MANIFEST.md

@@ -1,7 +1,7 @@
 # Release Manifest
 
-Snapshot: 2026-07-17
-Candidate: `agentnet 0.1.12`
+Snapshot: 2026-07-18
+Candidate: `agentnet 0.1.13`
 Profile: self-hosted local conformance candidate
 
 This is not a production release. It is the human projection of
@@ -23,8 +23,8 @@ owner, installer, or production-topology gates.
 |---|---|
 | Runtime | CPython `3.13.13` |
 | Python range | `>=3.13, <3.15` |
-| `uv.lock` | format `1`, revision `3`, SHA-256 `9134e0f5fc12c080fe19bca76038a4cf174505fa43fc7554359db6a2d7e93926` |
-| `pyproject.toml` | SHA-256 `69a0513c1225535a76ccb9734e49861b697f2adf3d56c6683d9995ca33d51d5e` |
+| `uv.lock` | format `1`, revision `3`, SHA-256 `98bf7cf769716eacbfdea3a168f9f2f65ab1f6d91c52414532115c93d59f4e55` |
+| `pyproject.toml` | SHA-256 `9905bfdcf04c1d455cba115cebe1412159645dfe253b7eca24d8654b74cc2e60` |
 | Build backend | `hatchling==1.28.0` and editable-build helper `editables==0.5`, both in the `build` dependency group and frozen lock |
 
 The production Docker recipe installs the locked build group, then installs

evidence/local/2026-07-18-v0.1.13/artifacts/.gitignore

@@ -0,0 +1,5 @@
+*
+!/.gitignore
+!/RETENTION.md
+!/*.whl
+!/*.tar.gz

evidence/local/2026-07-18-v0.1.13/artifacts/RETENTION.md

@@ -0,0 +1,3 @@
+# Retained release archives
+
+This directory intentionally retains only `.gitignore`, `*.whl`, and `*.tar.gz` release-evidence files.

evidence/local/2026-07-18-v0.1.13/artifacts/agentnet-0.1.13-py3-none-any.whl

@@ -0,0 +1,42 @@
+{
+  "run_id": "2026-07-18-v0.1.13",
+  "evaluated_at": "2026-07-18T15:00:00+00:00",
+  "scope": "v0_1_13_canonical_onboarding_prompt_patch_candidate",
+  "release_certified": false,
+  "release_source_tree_sha256": "b60207252c36fc0cfcc453cb1a11f8473a1513769e76d38023ffe796075a5488",
+  "prior_runtime_evidence": "evidence/local/2026-07-17-v0.1.12/manifest.json",
+  "supersedes_package_evidence": "evidence/local/2026-07-17-v0.1.12/manifest.json",
+  "change_boundary": "Documentation/skill-only canonical fresh-laptop onboarding prompt and regression checks. Runtime authority, enrollment implementation, A2A, activation, company data, first-message, production readiness, and cutover remain unchanged and not authorized.",
+  "commands": [
+    {
+      "command": "pre-release critic and constitution-watcher review",
+      "result": "PASS; release remains owner-controlled and unrelated worktree edits are excluded"
+    },
+    {
+      "command": "UV_CACHE_DIR=/tmp/uv-cache uv run --extra test pytest -q tests/conformance/test_npm_package.py tests/conformance/test_release_manifest.py",
+      "result": "30 passed; 0 failed"
+    },
+    {
+      "command": "two independent SOURCE_DATE_EPOCH=1580601600 uv builds",
+      "result": "byte-identical 0.1.13 sdist and wheel archives"
+    },
+    {
+      "command": "npm run check",
+      "result": "source, installed generation 1, and repacked generation 2 each reported 1043 passed and 15 expected host/PostgreSQL skips; package check, release verifier, and two-generation packed gate passed"
+    },
+    {
+      "command": "mutation-authorized local PostgreSQL attempt",
+      "result": "not executed: no disposable mutation-authorized PostgreSQL database configured; no database changed"
+    }
+  ],
+  "artifacts": [
+    {
+      "path": "evidence/local/2026-07-18-v0.1.13/artifacts/agentnet-0.1.13.tar.gz",
+      "sha256": "b45e3a73ca1d82ebef61ad0c1a78f95b0cd312c18670ff5cc8363bfdbd970e54"
+    },
+    {
+      "path": "evidence/local/2026-07-18-v0.1.13/artifacts/agentnet-0.1.13-py3-none-any.whl",
+      "sha256": "22fbc24ad51a9fafb4414b04e3941117b20ecb6181282c94ac07a490a8102c50"
+    }
+  ]
+}

evidence/local/2026-07-18-v0.1.13/artifacts/agentnet-0.1.13.tar.gz

@@ -30,7 +30,7 @@ const requiredPublishedFiles = [
   "evidence/gates/G04/2026-07-13-alpha2-http-json/compatibility.html",
   "evidence/gates/G04/2026-07-13-alpha2-http-json/junitreport.xml",
   "evidence/gates/G04/2026-07-13-alpha2-http-json/tck_report.html",
-  "evidence/local/2026-07-17-v0.1.12/artifacts/RETENTION.md",
+  "evidence/local/2026-07-18-v0.1.13/artifacts/RETENTION.md",
   "skills/**/*.md",
 ];
 for (const relative of requiredPublishedFiles) {