[OCR compatibility] Qualify v1.11.1

[github-actions]

OCR v1.11.1 compatibility evidence

• machine result: compatible
• classification: human-review-required
• all upstream asset digests and sha256sum.txt: verified
• Linux amd64 version/help/preview/result-consumer probes: passed

Upstream release changes

• release: https://github.com/alibaba/open-code-review/releases/tag/v1.11.1
• compare: alibaba/open-code-review@v1.11.1...v1.11.1
• current tested baseline: v1.11.1
• published: 2026-08-31T10:06:30Z

## 🚀 Features

- feat(allowlist): add Pug template support (#1114)
- feat(grouping): skip the grouping LLM call for small change sets (#1103)
- feat(allowlist): add Verilog, SystemVerilog, and VHDL support (#1050)

## 🐛 Bug Fixes

- fix(security): prevent rule.json from reading arbitrary files on the review host (#1100)
- fix(viewer): report selected files from run manifest (#1096)

## 📖 Documentation

- docs(site): replace concurrency feature card with effort (#1116)
- docs(skill): correct timeout description to reflect effort-scaled group timeout (#1110)

## Other Changes

- chore(skill): remove Prerequisites section from delegate SKILL.md (#1098)

**Full Changelog**: https://github.com/alibaba/open-code-review/compare/v1.11.0...v1.11.1

Classification reasons

• candidate is not a newer patch in the tested major/minor line
• release notes contain a material or ambiguous compatibility signal

Human checklist

• Review upstream release notes and relevant commits.
• Confirm compatible or incompatible.
• Confirm tested support and recommended-version promotion.
• Route any compatibility change through protected PR and stable release gates.

Workflow evidence

• run: https://github.com/xeonvs/open-code-review-toolkit/actions/runs/33413376953
• classification: human-review-required

[xeonvs]

v0.8.7 coordination: qualification is blocked by #163. Promotion also requires the #162 multi-round capability result to remain explicit; OCR 1.11.1 is not pinned until both contracts are satisfied.

[xeonvs]

Final Draft-head reconciliation:

• exact toolkit head: 9b211e0e622d2d21081347effb1bf24e9389fc9b
• exact tree: 73844c7946d8126880052a860b9ae60a9da6f7d7
• final compatibility run: https://github.com/xeonvs/open-code-review-toolkit/actions/runs/33413376953 — passed

The final run intentionally appears as v1.11.1...v1.11.1 because this Draft already promotes 1.11.1 in the manifest. It is an exact-final-tree regression qualification, not the original release-delta audit. The canonical 1.11.0 → 1.11.1 semantic audit remains the committed compatibility/evidence/ocr-1.11.1.json, docs/compatibility.md, and the earlier successful run 33400677367.

Integration conclusion: consume small-change grouping, selected-session manifest coverage, repository-confined rule.json, and the new Pug/Verilog/SystemVerilog/VHDL rules. Result/manifest schemas, completion cap 16384, explicit 4096, default medium effort, effective max-tools, private reasoning/session boundaries, DLP, receipt v6, telemetry ownership, and approval authority remain unchanged. GitHub Action/plugin/npm/provider-preset changes remain upstream-only.

The issue and milestone stay open because PR #164 is Draft and the configured external OCR+LLM qualification is still pending; do not merge or publish from this comment.

[github-actions]

Stable v0.8.7 delivery is verified by immutable release asset release-receipt.json in v0.8.7 (SHA-256 6320b448f3b0d429a4a55f74b85c0f0afa4f1b973a7bfecd598f2e85f7b93696).