docs: close out 7.0.7 publication while preserving package bytes

[sumitake]

Bring the root README and architecture handbook up to the published 7.0.7/runtime 5.0.8 evidence. Record the immutable tag and assets, 184-file installation comparisons, successful named Codex/Grok canaries, the unmet installed Gemini qualification after a zero-turn service 503, and the explicit Claude inference exception. Preserve older release snapshots and distinguish installed files from already-running desktop sessions.

Every plugins/ file remains identical to the signed release source, including the packaged README's release-time snapshot. The existing documentation test now applies current-publication assertions to the repository README, preventing it from requiring a post-tag package rewrite at the same version. No manifest, skill, client, runtime, release asset or tag changes. Per-page determinations are in docs/architecture/status-and-evidence.md.

Validation: five focused distribution tests, release consistency, active-tree export safety, secret scanning, changelog preview and whitespace checks passed. Primary independently reproduced tree d2460e33df18c4d249c59abdc83f598492b549a3, compared all 184 released archive files and verified that historical snapshot bodies are unchanged.

Contributor/review lineage: Grok (xAI) produced the documentation patch; Codex integrated and reviewed it and corrected the existing test. Independent Gemini (Google) returned APPROVE with no actionable findings for exact head 84735394b66b09b66758f31cb9ada8e43e532343. This was an inline-diff review against supplied verified release facts, not independent asset downloads or test execution. Response-scoped native model gemini-3.8-flash, source agy.generation_metadata.model; the caller recomputed matching response SHA-256 476b2c771a870aed7d3e178a9576cb9575040d8aa33b82cbf19bf6aa0dceb11d. Native execution and cleanup succeeded. This new documentation review does not replay or qualify the earlier installed Gemini canary.

author: codex (integrator/test correction); grok (documentation contributor)
standing_directives: AGENTS.md and docs/public-governance.md; immutable published package, signed commits, exact-head independent review and protected merge
tier: 2
cross_check: PROCEED - caller disposition adopting independent Gemini APPROVE on exact 8473539; Google distinct from OpenAI and xAI author families; one round, no actionable findings
post_condition: positively read back merged public documentation and unchanged plugins tree, release tag and asset identity
mcp_coverage_gap: NONE
contributor_rights: OWNER-AUTHORED
operator_reserved: no

Summary by CodeRabbit

• Release

  • Updated release documentation to reflect agent-collab 7.0.7 and runtime 5.0.8.
  • Recorded signed, notarized macOS artifacts and verified published release contents.

• Documentation

  • Added v7.0.7 publication metadata, evidence, checksums, and closeout status.
  • Clarified provider qualification status, including remaining Claude and Gemini limitations.
  • Reclassified v7.0.6 documentation as historical.

• Tests

  • Updated release documentation checks to validate the current published release banner and closeout records.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 3f71d0e1-8eeb-4035-b1b0-95fb214dd2ce

📥 Commits

Reviewing files that changed from the base of the PR and between 645f74c and 8473539.

📒 Files selected for processing (10)

• README.md
• changelog.d/20260916-0735-release707-closeout.md
• docs/architecture/README.md
• docs/architecture/capabilities-and-workflows.md
• docs/architecture/claude-participation.md
• docs/architecture/lifecycle-and-operations.md
• docs/architecture/project-estimation.md
• docs/architecture/repository-and-release.md
• docs/architecture/status-and-evidence.md
• tests/test_public_distribution_contract.py

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

Changes

The release documentation now records agent-collab 7.0.7 with runtime 5.0.8. It adds publication evidence, installation observations, qualification boundaries, updated architecture references, and a revised root README distribution contract test.

Release closeout

Layer / File(s)	Summary
Release evidence and closeout record README.md, changelog.d/..., docs/architecture/status-and-evidence.md	Documents the 7.0.7 release, runtime 5.0.8, signed artifacts, observed installations, canary results, provider exceptions, and historical 7.0.6 status.
Architecture and operational references docs/architecture/README.md, docs/architecture/capabilities-and-workflows.md, docs/architecture/claude-participation.md, docs/architecture/lifecycle-and-operations.md, docs/architecture/project-estimation.md, docs/architecture/repository-and-release.md	Updates published-version references and records runtime artifact, calibration, quota, repository, and Claude participation status.
Publication contract validation tests/test_public_distribution_contract.py	Checks the current-release banner in the mutable root README and treats the package README as an immutable release-time archive.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 84735

The release documentation and publication-contract test changes are consistent and mergeable.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 1 functions across 1 files. (9 skipped: 9 …	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately and concisely describes the primary changes: documenting the 7.0.7 publication closeout while preserving immutable package contents.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 1 functions across 1 files. (9 skipped: 9 unsupported.)

• Fix all pre-merge checks with AI

✨ Finishing Touches 💡 2

📝 Generate docstrings 💡

• Create stacked PR
• Commit on current branch

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-16T21:16:24.028640Z	8473539	PR opened
🔒 Security Review	✅ Completed 2026-09-16T21:16:03.690464Z	8473539	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[sumitake]

Caller summary of independent review (not a verbatim native transcript)

Gemini returned APPROVE, with no actionable findings, for exact head 84735394b66b09b66758f31cb9ada8e43e532343 over base 645f74c04c2f8374006c5ba2183ba398e30ad683. The review covered the inline ten-path diff and supplied verified release facts: truthful evidence distinctions, immutable package contents, historical snapshots, the minimal existing-test scope correction and public documentation sanitization.

The primary independently reproduced tree d2460e33df18c4d249c59abdc83f598492b549a3, checked all 184 released files against the archive, and verified unchanged historical bodies. Five focused tests and release consistency passed. Grok/xAI contributed documentation and Codex/OpenAI integrated it; the Google reviewer is distinct from both author families.

Native response identity: model gemini-3.8-flash, scope response, source agy.generation_metadata.model, conversation a3d4113a-43e5-4b04-975b-6c8e89e6c192, step 1. The caller recomputed the matching trimmed response SHA-256 476b2c771a870aed7d3e178a9576cb9575040d8aa33b82cbf19bf6aa0dceb11d. Native execution was successful with confirmed cleanup.

Limits and adjudication: the reviewer did not independently download assets or run tests. Its broad factual-confirmation phrasing is scoped to supplied evidence. The caller rejects loose wording that every packaged file is signed: signing is established for the native bundles and release tag; all released file contents are hash-bound and compared. That wording is not present in the changed documentation. The raw review contains private local links and is retained privately. This separate documentation review succeeded; the earlier installed Gemini canary remains historically unqualified and was not replayed.

[sumitake]

@coderabbitai full review

[coderabbitai]

✅ Action performed

Full review finished.

[sumitake]

Final review inventory for exact head 84735394b66b09b66758f31cb9ada8e43e532343:

• Paginated issue comments, formal reviews, inline comments, review threads and all available check annotations inspected. CodeRabbit formally APPROVED this head; its full review finished. Codex code and security reviews both completed without findings. No inline findings or unresolved threads remain.
• CodeRabbit's generic docstring-coverage warning concerns the one existing test function. Its descriptive name and the added explanatory comment cover the scope change; it is a non-blocking documentation-style suggestion, not a correctness or release-identity finding. No unrelated docstring churn is added to the reviewed commit.
• The 32 emitted Dependabot-negative-fixture annotations are expected assertions from scripts/test_dependabot_gate.py; their containing test jobs passed. They are not actual Dependabot gate failures.
• The separate dynamically generated GitHub Advanced Security AI job failed before producing a review: CAPIError: 400 The requested model is not supported. This auxiliary scan is unavailable, not passed or “no findings.” The operator's explicit governance-availability exception applies to this missing provider model. Required CI, CodeQL, completed Codex security/code reviews and the independent response-bound Gemini approval remain distinct positive evidence. No hosted model setting was changed and no unsupported request was replayed.

All PR-required contexts are successful (the irrelevant Dependabot auto-merge job is skipped). The normal protected merge remains subject to the final compliance check and exact-head readback; no admin bypass is requested.