[OCR compatibility] Qualify v1.11.0

[github-actions]

OCR v1.11.0 compatibility evidence

• machine result: compatible
• classification: human-review-required
• all upstream asset digests and sha256sum.txt: verified
• Linux amd64 version/help/preview/result-consumer probes: passed

Upstream release changes

• release: https://github.com/alibaba/open-code-review/releases/tag/v1.11.0
• compare: alibaba/open-code-review@v1.10.2...v1.11.0
• current tested baseline: v1.10.2
• published: 2026-08-28T06:06:56Z

## 🚀 Features

- feat(allowlist): add Handlebars and Mustache support (#1086)
- feat(config): validate provider existence before auxiliary fields (#1093)
- feat(agent): include churn stats (+N/-M) in the other-changed-files list (#1078) (#1082)

## 🐛 Bug Fixes

- fix(llm): preserve provider reasoning/thinking across assistant turns (#1070)
- fix(agent): scale subtask timeout linearly with effort review rounds (#1085)
- fix(filter): omit forced tool choice (#1065)
- fix(tool): support subpath and cross-platform queries in file_find (#1075)

## 📖 Documentation

- docs(ko): polish the six new Korean pages (#1087)
- docs(ko): complete the Korean docs locale (#1084)
- docs(ko): add Korean translation for the core user guide (#1080)
- docs(cli): align --max-tools help text with min 50 clamp (#1077)

**Full Changelog**: https://github.com/alibaba/open-code-review/compare/v1.10.2...v1.11.0

Classification reasons

• candidate is not a newer patch in the tested major/minor line
• release notes contain a material or ambiguous compatibility signal

Human checklist

• Review upstream release notes and relevant commits.
• Confirm compatible or incompatible.
• Confirm tested support and recommended-version promotion.
• Route any compatibility change through protected PR and stable release gates.

Workflow evidence

• run: https://github.com/xeonvs/open-code-review-toolkit/actions/runs/33158664020
• classification: human-review-required

Toolkit 0.8.6 integration

• Hosted run 33158664020 and official asset hashes accepted after semantic source review.
• Manifest, preflight, GitLab example, current docs, Rules, and local OCR target exact 1.11.0.
• Strict 1.10.2 comparison and 1.11.0 candidate grouping inventories preserve status, churn, and order without production fallback.
• Completion cap, default-medium effort, max-tools runtime, result/manifest, receipt v5, DLP, telemetry, summary, and approval boundaries reconciled.
• Draft PR Toolkit 0.8.6: OCR 1.11.0 and precise security signals #154 is bound to hosted-green head 79d558779c69ef2e2d16768bddc2e06190173854.

The issue remains open with milestone v0.8.6 because configured-provider qualification, merge, and stable delivery are deliberately deferred; OCR 1.10.2 is comparison evidence only.

[github-actions]

Stable v0.8.6 delivery is verified by immutable release asset release-receipt.json in v0.8.6 (SHA-256 098128a12823ca67019b563a4fdc943208f94f55c468d0afa02072a1475548b5).