sumitake · sumitake · Sep 16, 2026 · Sep 16, 2026
@@ -7,9 +7,12 @@ remains opaque content for the calling agent to interpret.
 
 This public repository's current source is **agent-collab** (v7.0.7).
 
-Current published release: **7.0.6** ([`v7.0.6`](https://github.com/sumitake/agent-collab/releases/tag/v7.0.6)).
-It carries signed provider runtime `5.0.7`. Host installation, readiness, and
-provider availability remain separate evidence planes.
+Current published release: **7.0.7** ([`v7.0.7`](https://github.com/sumitake/agent-collab/releases/tag/v7.0.7)).
+It carries signed provider runtime `5.0.8`. Host installation, readiness, and
+provider availability remain separate evidence planes. The package README
+remains the immutable release-time snapshot; current postpublication facts
+belong in this README and the handbook. Later repository documentation does
+not rewrite the tagged release artifact.
 
 The human-first [architecture handbook](docs/architecture/README.md) explains
 the system boundaries and lifecycle. The package reference below is the
@@ -20,7 +23,7 @@ installation, and readiness claims separate.
 
 ## What's new - v7.0.7
 
-The 7.0.7 source prepares runtime `5.0.8`. Native calls keep the operating
+Release 7.0.7 carries runtime `5.0.8`. Native calls keep the operating
 account's login context and SSH session markers. Bounded native output remains
 available when optional event metadata or Unicode is irregular. Eligible
 read-only Gemini work can complete one correlated empty successful turn within
@@ -32,9 +35,12 @@ advisory. A demonstrated caller setup defect permits at most one corrected
 read-only request per original request across all descendants, without
 replaying uncertain mutations or switching providers.
 
-Signed dual-architecture delivery and staged qualification are in progress.
-The currently published release remains 7.0.6; this source preparation does not
-claim a new release, installation, or provider availability.
+Both macOS architectures are signed, notarized, and published. Released files
+match the observed installations. Fresh installed Codex and Grok canaries
+passed; installed Gemini qualification remains unmet after a native service
+503, and Claude inference remains explicitly excepted. The
+[dated evidence](docs/architecture/status-and-evidence.md) separates these
+results from staged qualification and existing-session skill loading.
 
 For earlier release history, see the full [CHANGELOG](CHANGELOG.md).
 
@@ -123,7 +129,7 @@ size-branded source or generated skill surface is supported.
 ## Runtime trust boundary
 
 The canonical workspace build owns the final binary and generated manifest.
-The 7.0.7 source targets:
+The 7.0.7 release carries:
 
 - manifest schema 4;
 - runtime protocol 5;
@@ -196,7 +202,7 @@ Dependabot for dependency update review.
 
 After every other release task finishes, complete the
 [documentation closeout](docs/architecture/repository-and-release.md#final-documentation-closeout).
-The v7.0.6 closeout is recorded in the
+The v7.0.7 closeout is recorded in the
 [status and evidence snapshot](docs/architecture/status-and-evidence.md). Each
 future closeout must likewise align the architecture handbook, this README,
 and generated changelog evidence with the exact release without exposing

@@ -0,0 +1,4 @@
+### Documentation
+
+- Record the published agent-collab 7.0.7 / runtime 5.0.8 release, verified assets, and installed file contents. Keep successful installed Codex/Grok cases separate from Gemini's native service-availability gap, the Claude inference exception, and existing-session loading.
+- Align the root README and handbook publication and maintenance references with the release. The package README and all 184 released package files plus source marketplace-fragment.json remain the immutable tagged snapshot; later repository documentation does not rewrite that artifact. Preserve historical snapshots and signed changelog history.
@@ -10,7 +10,7 @@ the contribution contract remain authoritative for their respective claims.
 When two generations differ, use the status vocabulary below instead of
 silently treating them as the same thing.
 
-The current published release is v7.0.6 with signed provider runtime 5.0.7,
+The current published release is v7.0.7 with signed provider runtime 5.0.8,
 manifest schema 4, runtime protocol 5, native contract 4, and wire schema 12.
 
 ## Read this handbook in order
@@ -106,7 +106,7 @@ not a public issue or pull request.
 | --- | --- | --- |
 | What does the package install? | [System context](system-context.md) | Host manifests, generated marketplaces, package tree, and distribution tests. |
 | Which workflows exist? | [Capabilities and workflows](capabilities-and-workflows.md) | `skill-specs/`, generated skills, package reference, and skill-contract tests. |
-| How are agent projects estimated? | [Project estimation](project-estimation.md) | Public request/result schemas, deterministic helper, released v7.0.6 maintenance evidence, skill checkpoints, maintenance verifier, producer-byte compatibility fixtures, and focused tests. |
+| How are agent projects estimated? | [Project estimation](project-estimation.md) | Public request/result schemas, deterministic helper, released v7.0.7 maintenance evidence, skill checkpoints, maintenance verifier, producer-byte compatibility fixtures, and focused tests. |
 | Who may review, write, or merge? | [Governance and authority](governance-and-authority.md) | Host policy, coordinator, public governance contract, PR template, and compliance checks. |
 | Is a route usable now? | [Status and evidence](status-and-evidence.md) | Installed version plus provider-free readiness on that host. Repository presence alone is insufficient. |
 | How do I install or recover? | [Lifecycle and operations](lifecycle-and-operations.md) | Current host CLI, migration doctor, verified runtime client, and migration policy. |

@@ -138,7 +138,7 @@ workflows explicitly compose the checkpoint before final presentation. A host
 without contextual skill selection uses explicit invocation and reports that
 the automatic checkpoint was unavailable. See
 [Project estimation](project-estimation.md) for modes, examples, output
-semantics, and the published v7.0.6 maintenance evidence.
+semantics, and the published v7.0.7 maintenance evidence.
 
 The packaged prior is currently an explicit bootstrap: enhancement duration is
 descriptive, bootstrap confidence cannot be high, and unsupported greenfield,

@@ -58,6 +58,11 @@ provider-free readiness did not establish inference access. Omitted Claude
 profiles remain unqualified in [#162](https://github.com/sumitake/agent-collab/issues/162);
 the attempt was not replayed, and no billing or credential change was made.
 
+For 7.0.7, the supported Claude package update succeeded and every released
+file matched the published artifact. Managed Claude inference remains
+explicitly excepted under the operator's absence/authentication decision; no
+new Claude inference qualification or existing-session reload is claimed.
+
 ## Host and resident-primary role
 
 Claude Code remains a fully supported host: the package installs natively,

@@ -131,7 +131,7 @@ Preserve the typed coordinator response. Any later issue report is an explicit,
 separately authorized action and never grants governance authority or licenses
 replay of the provider request.
 
-`project-estimation` is offline and read-only by default. The packaged v7.0.6
+`project-estimation` is offline and read-only by default. The packaged v7.0.7
 source contains an explicit bootstrap prior: enhancement duration is
 descriptive, greenfield may return `no_compatible_prior`, and absent token
 evidence returns `unavailable_no_token_prior` rather than zero. Persist an

@@ -19,16 +19,18 @@ consents to an output path.
 ## Current status
 
 The skill, helper, schemas, planning checkpoints, and release-verification
-source ship in the published v7.0.6 release. A governed, content-addressed
+source ship in the published v7.0.7 release. A governed, content-addressed
 bootstrap handoff is admitted from the frozen producer. It contains a supported
 enhancement duration hierarchy but no greenfield root and no published token,
 wait, rework, quota-delay, or marginal-cash metrics.
 
 This is production maintenance evidence in the explicit `bootstrap` state, not
 a promoted calibration claim. Its estimates are descriptive and never high
 confidence. The refreshed maintenance evidence is receipt-bound to the
-published 7.0.6 source; v6.2.0 remains the historical release that introduced
-the bootstrap.
+published 7.0.7 source; v6.2.0 remains the historical release that introduced
+the bootstrap. The 7.0.7 handoff retains verified last-good calibration dated
+2026-08-25; it does not claim newly promoted calibration. Unknown provider
+quotas remain unknown.
 
 ## Mental model
 

@@ -18,7 +18,7 @@ contributors do not need access to it.
 | `plugins/agent-collab/.claude-plugin/` and `.codex-plugin/` | current | Host manifests for the same name and version. | Update together. |
 | `.claude-plugin/` and `.agents/plugins/` | generated/current | Claude-compatible and Codex marketplace views. | Regenerate with `scripts/build_marketplace.py`. |
 | `plugins/agent-collab/runtime-manifest.json` | current contract | Closed runtime artifact and route metadata. | Generated/reviewed release input; never use it to infer host activation. |
-| `plugins/agent-collab/runtime/` | repository-only when present | Final manifest-listed native bundle. | Only final reviewed signed artifacts may enter. No native source. |
+| `plugins/agent-collab/runtime/` | verified release artifacts; host state separate | Final manifest-listed native bundles shipped in the current release. | Only final reviewed signed artifacts may enter. No native source. |
 | `docs/architecture/` | current | Public architecture handbook. | Update with boundary or lifecycle changes. |
 | `docs/design/` | mixed | Design-of-record and historical review evidence. | Consult the design index and source/tests before treating it as current. |
 | `docs/public-governance.md` | current/normative | Contribution and merge contract. | Keep prose and automation aligned. |
@@ -101,11 +101,11 @@ operator notification if still unsuccessful. Expired pricing becomes
 `unpriced`; expired quota becomes `unknown`. Structural, privacy, provenance,
 integrity, schema, and material-regression failures always block.
 
-The published v7.0.6 release admits the governed bootstrap aggregate,
+The published v7.0.7 release admits the governed bootstrap aggregate,
 pricing/quota snapshots, notification, and schema-3 receipt introduced in
 v6.2.0. The enhancement duration prior is descriptive; greenfield and
 unsupported metric families remain unavailable. The bootstrap is not promoted
-calibration; the refreshed maintenance evidence is receipt-bound to 7.0.6. See
+calibration; the refreshed maintenance evidence is receipt-bound to 7.0.7. See
 [Project estimation](project-estimation.md).
 
 ### Policy-only

@@ -17,7 +17,53 @@ runtime. Each has a different evidence source.
 | Runtime readiness | Provider-free evidence that the selected package and managed boundary are callable for the reported contracts. | A guarantee that provider authentication, quota, or a future request will succeed. |
 | Invocation result | The typed outcome of one bounded request. | General availability, permission to retry with wider authority, or merge approval. |
 
-## Current snapshot — v7.0.6
+## Current snapshot — v7.0.7
+
+The [`v7.0.7` release](https://github.com/sumitake/agent-collab/releases/tag/v7.0.7) was published on
+2026-09-16 at 07:11:29 UTC.
+The signed annotated v7.0.7 tag object `2fc377286b6a2d5869c1e62ad95fecf607d262ce` identifies public commit `645f74c04c2f8374006c5ba2183ba398e30ad683`.
+The [exact release workflow](https://github.com/sumitake/agent-collab/actions/runs/35067054765)
+succeeded. Both verification hosts compared the downloaded assets with the
+canonical archive, checksum and SPDX metadata for that commit.
+
+| Published asset | Verified SHA-256 |
+| --- | --- |
+| `agent-collab.v7.0.7.plugin` | `ecd4cab1cdb51f72c5e6a88c5757c62c7cf9222957106d06a805e7249729d05e` |
+| `agent-collab-v7.0.7.spdx.json` | `216f5ea2f1062509844db3a2730928c3a23a09e26938ebb2b210b48c7585a9da` |
+| `agent-collab.v7.0.7.plugin.sha256` | `e6c643c4733028b867711674b1453b347d13a9fa3528a8e13dd902909d138a1e` |
+
+| Observation | Status | Interpretation |
+| --- | --- | --- |
+| Package 7.0.7 carries signed and notarized runtime 5.0.8 for macOS ARM64 and Intel. Manifest schema 4, protocol 5, native contract 4 and wire schema 12 remain unchanged. | verified release identity | The manifest binds both 45-member native bundles. Publication does not establish provider availability. |
+| The released manifest lists 12 logical actions, eight logical agents and two architecture artifacts; the package has 53 generated skills. | verified current inventory | Historical transport-action/source-pair counts remain historical. |
+| All 184 released files match the four observed ARM installations (Claude, Codex, Antigravity/Agy and Grok), and the observed Intel Codex installation. Source `marketplace-fragment.json` also remains unchanged. | verified installed file contents | Installed source-manager marketplace metadata matches the exact release source. Agy-generated host metadata is separately identified. Installed filesystem modes follow the documented client checks; no literal identical-tree claim is made for host-added files. |
+| Provider-free planning passed from the ARM Codex, Gemini and Grok installations. Intel Codex readiness and planning passed. Installed Grok mechanical qualifiers verified both fixture reads and cleanup with zero model calls. | verified package readiness and mechanical qualification | These checks do not prove authentication, inference or provider service availability. |
+| Staged ARM Gemini/Grok and staged Intel Codex canaries passed before publication. Fresh installed ARM Codex/Grok and Intel Codex canaries returned their unique fixture markers. | bounded native execution verified for the named cases | Each installed case used one new request, with source/package bytes unchanged, zero replay and confirmed native and fixture cleanup. Successful staged evidence is not a new installed canary. |
+| The installed ARM Gemini attempt returned a native service-unavailable 503 at eligibility checking, with zero model turns and no answer. Native dispatch reported `provider_error` and exit 1; the outer response preserved the diagnostic. | installed Gemini qualification unmet | One consumed attempt; cleanup confirmed; no replay or silent provider substitution. The byte-verified installation is retained with this service-availability gap. No artifact defect or Gemini approval is inferred. |
+| Claude package installation succeeded; managed inference remains explicitly excepted under the operator's absence/authentication decision. | installed; inference not qualified | No omitted Claude profile is activated and no Claude inference success is claimed. Historical subscription-denial evidence remains below. |
+| No existing desktop session was restarted for the update. | fresh-session skill loading unverified | Package installation and execution from its installed path do not establish the skill catalog already loaded by a running conversation. |
+| Maintenance is bound to 7.0.7 and retains verified last-good calibration dated 2026-08-25. | verified bootstrap maintenance | It is descriptive bootstrap evidence, not newly promoted calibration. Unknown quotas remain unknown. |
+
+The evidence supports publication and the recorded installations, with the explicit limits above. Installed Gemini acceptance remains pending service recovery; this record does not claim all-carrier qualification or authorize replay of the consumed attempt. Later repository documentation does not rewrite the tagged release artifact. [PR #215](https://github.com/sumitake/agent-collab/pull/215) contains the distribution's review and validation evidence. [PR #216](https://github.com/sumitake/agent-collab/pull/216) compiled the canonical changelog at the signed release. The closeout adds its own fragment without changing that signed history.
+
+### v7.0.7 closeout determinations
+
+| Surface | Determination | Evidence basis |
+| --- | --- | --- |
+| Root README | **updated** | Published 7.0.7/runtime 5.0.8, one current showcase, and scoped installed qualification match the release evidence. Current postpublication facts belong here and in the handbook. |
+| Package README | **verified current at the signed tag** | The package README remains the immutable release-time snapshot. Later repository documentation does not rewrite the tagged release artifact. All 184 released package files plus source `marketplace-fragment.json` remain unchanged. |
+| Handbook index | **updated** | Current release and maintenance links identify 7.0.7. |
+| System context | **verified current** | Package ownership, public/private boundaries, caller integration and all-author identity checks match the released source. |
+| Capabilities and workflows | **updated** | Maintenance version is current; the 53-skill map, authority limits and caller-owned independence procedure remain valid. |
+| Governance and authority | **verified current** | Candidate selection remains separate from response-correlated approval; every contributing author family is excluded where independence is required. No policy change is part of this closeout. |
+| Lifecycle and operations | **updated** | Maintenance version is current. Existing Grok pinned uninstall `--keep-data` and tagged reinstall guidance already covers the observed replacement; no new installation machinery or procedure is added. Canonical native HOME/SSH context and caller sandbox guidance match the observed procedures. |
+| Repository and release architecture | **updated** | Shipped native artifacts and the version-bound maintenance receipt are current; source, publication, installation and qualification remain separate. |
+| Project estimation | **updated** | The 7.0.7 handoff retains last-good bootstrap evidence and truthful unknown quotas; no new promoted calibration is claimed. |
+| Claude participation | **updated** | The current package installation is recorded separately from excepted inference; earlier subscription observations remain historical. |
+| Status and evidence | **updated** | Exact assets and scoped staged/installed outcomes are recorded above; earlier release snapshots remain historical. |
+| Generated changelog | **verified current at the signed tag** | PR #216 compiled the canonical changelog before the immutable tag. This closeout adds a fragment and leaves the signed history unchanged. |
+
+## Historical snapshot — v7.0.6
 
 The [`v7.0.6` release](https://github.com/sumitake/agent-collab/releases/tag/v7.0.6) was published on
 2026-09-08 at 13:54:44 UTC.

@@ -39,11 +39,10 @@ def test_current_release_documentation_matches_published_evidence(self) -> None:
         )
         current_release = f"Current published release: **{version}**"
 
-        for path in (ROOT / "README.md", PLUGIN / "README.md"):
-            with self.subTest(path=path):
-                self.assertIn(current_release, path.read_text(encoding="utf-8"))
-
+        # Postpublication closeout updates repository docs. The package README
+        # remains part of the immutable archive produced before publication.
         root_readme = (ROOT / "README.md").read_text(encoding="utf-8")
+        self.assertIn(current_release, root_readme)
         self.assertIn(f"The v{version} closeout is recorded", root_readme)
 
         self.assertIn(f"## Current snapshot — v{version}", status)