v0.25.0 — a colony grows from one seed, and an agent can draft the next organ

[mmeyerlein]

Release B of the performance/structure wave, one day after Release A.

A colony grows itself from a single ref marker. (#424) Put cell.type: "ref" naming a composite template into a root tree; the first boot resolves it through the exact machinery a mutation uses and the marker consumes itself — idempotence across reboots follows from the shape, not from bookkeeping. The shipped composition example boots from a zero-cell seed byte-identical to its mutation-grown twin. Measured on a real personal-OS colony: 59 cells / 298 edges from one marker in 3 seconds, the full rebuild including memory import in 75 seconds.

The mutations door takes a manifest. (#422, #423) One body carrying an ordered list of declarations; the colony unrolls it itself — same validation per entry, stop at the first refusal, one receipt naming the exact position, resumable, no rollback (in a no-delete substrate a half-applied manifest is a precise state, not an error). meclaw --apply <file|-> pipes such a file in, Linux-style; the whole example organism applies from one file.

An agent can draft the next organ — and provably cannot apply it. (#425) builder@1.0.0 turns a build request into a manifest: trivial classes take a recipe fast lane (241 ms, no model call), complex ones consult the librarian corpus and one model call. The output travels back to the requester, who submits it under their own identity through submit@1.0.0 — the ONLY cell in the tree with an edge to the mutations door, enforced by topology and measured under attack: a gifted edge is refused, a missing policy line is refused, altered manifest bytes fail the sha256 digest check.

The vault rounds out. (#427, #428) unlock_env lets a vault inside a sealed hive unlock itself from the environment at boot — opt-in, default stays "a woken vault is always locked". The legacy plaintext inject_map path is removed (breaking by surface, measured to have zero possible users: it died before its first log line).

The public tree now ships builder, submit and the librarian — with a public-only corpus generated from exactly the bytes the public tree carries, enforced by an abort gate in the export itself.

5518 tests, 0 failures. Full details in the CHANGELOG.