Release 0.11.4

[jothimani-rajendran]

What

Release preparation for 0.11.4, which carries two fixes.

#168: an edit is judged as the file it would leave.

• Claude Code's Edit/MultiEdit payloads were judged as bare fragments, so a whole-file policy never saw them. Now the edit's replacements are applied to the file on disk and the result is judged.
• Codex apply_patch gets the same treatment in the runtime: each file the patch touches is rebuilt from disk. Codex hooks are not wired pre-write yet.
• Proven on both the repo route and the plugin route.

#169: Python bytecode is left out of a pack's lockfile hash. Before this, chock check reported an untouched pack as changed once a gate had run.

The version surfaces are bumped exactly as in 0.11.3:

• pyproject.toml, CITATION.cff, the action.yml default, docs/installation.md and docs/reviewer-evidence.md;
• the social preview, regenerated (gen_brand_assets.py --check reports it current);
• the changelog, whose Unreleased entries move under ## 0.11.4.

After merge: tag v0.11.4 on the merge commit and publish the GitHub release. The tag push runs release.yml (PyPI and binaries).

Definition of done

• chock check → 0 errors, 0 warnings, 0 infos
• chock check --only matrix passes; no behaviour change in this PR
• chock sync --repo . --check clean
• chock check --only verify clean
• Registry rescanned; no stale entries
• pytest -q: code unchanged since Judge an edit as the file it would leave, not as its fragment #168/Leave Python bytecode out of a pack's lockfile hash #169, both green on 3.11–3.13; CI re-runs it here
• Acceptance: no packaging, init, add or hook change in this PR
• Existing artifacts migrated: n/a
• Touched manifests: version bump + changelog entry
• ruff check . and ruff format --check . clean

Claims

• No surface is described as enforcing more than it installs; nothing emitted or installed changes.

🤖 Generated with Claude Code

https://claude.ai/code/session_01CzNYfzP8ymU3r4JB9Sz8Ha

---

Generated by Claude Code