release: prepare DevKit 1.1.3

.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "2718lab-devkit",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "description": "Local MCP server for developer workflow coordination, indexing, and evidence handling.",
   "author": {
     "name": "2718lab",

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -28,7 +28,7 @@ body:
     id: version
     attributes:
       label: DevKit version
-      placeholder: "v1.1.2"
+      placeholder: "v1.1.3"
     validations:
       required: true
 

CHANGELOG.md

@@ -8,6 +8,49 @@ only after the CI and artifact checks pass.
 
 ## [Unreleased]
 
+## [1.1.3] - 2026-09-01
+
+### Added
+
+- Added a canonical, exact-key, path-free storage-intent contract for Cargo
+  targets, Python caches, MCP packages, and Fast Lane task storage. Intent
+  hashes bind task, plan, context, byte/file budgets, and the complete target
+  descriptor without allowing DevKit to choose a filesystem path or claim a
+  storage lease.
+- Added DevKit-side storage profile/admission validation and compiler-proof
+  plumbing for compatible Hosts. Budgets participate in wave/profile evidence
+  and intent proofs can be privately bound, while the legacy eight-field
+  pre-Host skeleton and public dispatch batch remain free of storage intents;
+  production worker admission is not activated by this repository.
+
+### Fixed
+
+- Hardened verified legacy runtime-store migration so physical and semantic
+  schema shape, metadata, content addresses, acceptance identities, and exact
+  Atlas outbox/finalization bindings are checked before current DDL can run.
+  Schema drift, null/orphan rows, half-upgraded state, or content-address
+  mismatch fail closed.
+- Bounded storage-admission frames, deadlines, cancellation, and active bridge
+  I/O teardown; zero free-space floors and mismatched or unknown receipt fields
+  are rejected before a storage decision can be consumed.
+
+### Security
+
+- On an ordinary Host, the missing compatible private profile/authority
+  exchange keeps budgeted Fast Lane fail-closed with
+  `FASTLANE_HOST_AUTHORITY_UNAVAILABLE`/`NO_SAFE_WORK`. DevKit provides the
+  path-free intent and private protocol, but does not authenticate or provision
+  the Windows protected broker, create its root, activate cleanup, or provide a
+  local writer fallback.
+- Compatible, buildable Host source exists only on Ayleovelle's user-fork
+  [`codex/host-1.1.3-storage-governance-upstream`](https://github.com/Ayleovelle/codex/tree/codex/host-1.1.3-storage-governance-upstream)
+  branch, fixed at immutable commit
+  [`c3dde23bec21c45d10740f2eec09d9a1b87cd329`](https://github.com/Ayleovelle/codex/commit/c3dde23bec21c45d10740f2eec09d9a1b87cd329).
+  This identifies the separate Host source boundary only: it is not merged into
+  OpenAI upstream and is not shipped or activated by this plugin. Stock Codex
+  Hosts still fail closed, and final protected-broker compile, probe, and
+  runtime receipts remain Host-side release evidence rather than DevKit claims.
+
 ## [1.1.2] - 2026-08-27
 
 ### Fixed

README.md

@@ -1,14 +1,14 @@
 [简体中文](README.zh-CN.md)
 
-# 2718lab DevKit — Codex + MCP v1.1.2
+# 2718lab DevKit — Codex + MCP v1.1.3
 
-[![version](https://img.shields.io/badge/version-v1.1.2-blue)](./.codex-plugin/plugin.json)
+[![version](https://img.shields.io/badge/version-v1.1.3-blue)](./.codex-plugin/plugin.json)
 [![license](https://img.shields.io/badge/license-AGPL--3.0-blue)](LICENSE)
 
 2718lab DevKit is a Codex-first engineering toolkit: a local, stdio-only MCP
 runtime for bounded project indexing, Atlas evidence, Relay lifecycle
 coordination, and deterministic Fast Lane planning, plus a compact Skill bundle
-of reference manuals. This repository carries the versioned v1.1.2 package.
+of reference manuals. This repository carries the versioned v1.1.3 package.
 The checked-in manifest and allowlist define the executable runtime surface;
 the manual map, install, build, and verification sections below describe the
 supported workflow.
@@ -18,6 +18,15 @@ and CLI return `NO_SAFE_WORK` with zero assignments: they do not consume host
 status or live-account inputs, and have no worktree execution path. Host
 execution remains an external Desktop-host bridge requirement.
 
+For storage-governed execution, v1.1.3 references compatible Host source only
+on Ayleovelle's user-fork
+[`codex/host-1.1.3-storage-governance-upstream`](https://github.com/Ayleovelle/codex/tree/codex/host-1.1.3-storage-governance-upstream)
+branch, pinned to immutable commit
+[`c3dde23bec21c45d10740f2eec09d9a1b87cd329`](https://github.com/Ayleovelle/codex/commit/c3dde23bec21c45d10740f2eec09d9a1b87cd329).
+That fork is buildable Host source, not an OpenAI upstream merge or a component
+shipped by this package. Stock Codex Hosts have no attested protected broker
+and continue to fail closed.
+
 > [!IMPORTANT]
 > **Workflow reminder:** route from bounded evidence. Parallel A1/A2/A3 work is
 > allowed only with disjoint, exclusively owned write scopes and independent G:
@@ -168,7 +177,7 @@ source of record remains `main` and immutable release tags.
 
 Maintainers build that snapshot with the dedicated marketplace allowlist:
 
-    python .codex-plugin/build_main_artifact.py --plugin-root . --allowlist .codex-plugin/marketplace-artifact-allowlist.json --output <artifact-output-dir>/2718lab-devkit-marketplace-v1.1.2.zip
+    python .codex-plugin/build_main_artifact.py --plugin-root . --allowlist .codex-plugin/marketplace-artifact-allowlist.json --output <artifact-output-dir>/2718lab-devkit-marketplace-v1.1.3.zip
 
 ## Install and run locally
 
@@ -215,7 +224,7 @@ handles or falls back to an unrelated local start.
 The allowlisted builder creates a deterministic ZIP outside the plugin source
 tree. Choose an output directory outside the source tree:
 
-    python .codex-plugin/build_main_artifact.py --plugin-root . --output <artifact-output-dir>/2718lab-devkit-v1.1.2.zip
+    python .codex-plugin/build_main_artifact.py --plugin-root . --output <artifact-output-dir>/2718lab-devkit-v1.1.3.zip
 
 The artifact contains the manifest, .mcp.json, LICENSE, the locked Python
 project, and the runtime files selected by
@@ -381,7 +390,7 @@ freeze a transient regression count.
 
 ## Version
 
-This repository represents the versioned v1.1.2 package. Release notes are
+This repository represents the versioned v1.1.3 package. Release notes are
 in [CHANGELOG.md](CHANGELOG.md); build and install from the checked-in manifest,
 artifact allowlist, and locked dependency set. A maintainer dispatches Release
 from current `main`; it validates all declared gates, creates the annotated tag,

README.zh-CN.md

@@ -1,20 +1,27 @@
 [English](README.md)
 
-# 2718lab DevKit —— Codex + MCP v1.1.2
+# 2718lab DevKit —— Codex + MCP v1.1.3
 
-[![版本](https://img.shields.io/badge/version-v1.1.2-blue)](./.codex-plugin/plugin.json)
+[![版本](https://img.shields.io/badge/version-v1.1.3-blue)](./.codex-plugin/plugin.json)
 [![许可证](https://img.shields.io/badge/license-AGPL--3.0-blue)](LICENSE)
 
 2718lab DevKit 是一个 Codex-first 工程工具包：它包含一个本地、仅 stdio
 传输的 MCP 运行时，用于有边界的项目索引、Atlas 证据、Relay 生命周期协调和
 确定性的 Fast Lane 规划；同时还包含一组精简的 Skill 说明书。本仓库承载版本化的
-v1.1.2 包；已提交的 manifest 和 allowlist 定义可执行运行时范围，说明书导航、
+v1.1.3 包；已提交的 manifest 和 allowlist 定义可执行运行时范围，说明书导航、
 安装、构建和验证章节共同给出支持的工作流。
 
 当前版本保留刻意 fail-closed 的 Fast Lane 预览。公共编译器和 CLI 固定返回
 `NO_SAFE_WORK` 与零 assignments：不会消费 host-status 或实时账号输入，也没有
 worktree 执行路径。宿主执行属于未来外部 Desktop-host bridge 合同的要求。
 
+对于受存储治理的执行，v1.1.3 只引用 Ayleovelle 用户 fork 上的兼容 Host 源码：
+[`codex/host-1.1.3-storage-governance-upstream`](https://github.com/Ayleovelle/codex/tree/codex/host-1.1.3-storage-governance-upstream)
+分支，固定到不可变提交
+[`c3dde23bec21c45d10740f2eec09d9a1b87cd329`](https://github.com/Ayleovelle/codex/commit/c3dde23bec21c45d10740f2eec09d9a1b87cd329)。
+该 fork 是可构建的 Host 源码，不是 OpenAI upstream 合并，也不随本包交付。
+stock Codex Host 没有经过证明的 protected broker，继续 fail-closed。
+
 > [!IMPORTANT]
 > **工作流提醒：** 先用有界证据路由。A1/A2/A3 并行只允许发生在互不重叠、独占
 > 的写入范围，并各自使用 G: 盘隔离任务根。执行前必须 claim 并 bind；prewarm
@@ -148,7 +155,7 @@ Fast Lane 不含额度协调器合同；公共编译器和 CLI 不读取、协
 
 维护者使用专用的 marketplace allowlist 构建该快照：
 
-    python .codex-plugin/build_main_artifact.py --plugin-root . --allowlist .codex-plugin/marketplace-artifact-allowlist.json --output <artifact-output-dir>/2718lab-devkit-marketplace-v1.1.2.zip
+    python .codex-plugin/build_main_artifact.py --plugin-root . --allowlist .codex-plugin/marketplace-artifact-allowlist.json --output <artifact-output-dir>/2718lab-devkit-marketplace-v1.1.3.zip
 
 ## 本地安装与运行
 
@@ -188,7 +195,7 @@ RELAY_CAPABILITY_BROKER_UNAVAILABLE。服务器不会暴露原始 handle，也
 
 allowlist builder 会在插件源码树之外生成确定性的 ZIP。请选择源码树之外的输出目录：
 
-    python .codex-plugin/build_main_artifact.py --plugin-root . --output <artifact-output-dir>/2718lab-devkit-v1.1.2.zip
+    python .codex-plugin/build_main_artifact.py --plugin-root . --output <artifact-output-dir>/2718lab-devkit-v1.1.3.zip
 
 产物包含 manifest、.mcp.json、LICENSE、锁定的 Python 项目，以及
 .codex-plugin/main-artifact-allowlist.json 选中的运行时文件。它的可执行运行时
@@ -329,7 +336,7 @@ CI 和全新产物检查才是当前测试计数的唯一来源。它们验证
 
 ## 版本
 
-本仓库代表版本化的 v1.1.2 包。发布说明见
+本仓库代表版本化的 v1.1.3 包。发布说明见
 [CHANGELOG.md](CHANGELOG.md)；构建和安装请以已提交的 manifest、产物 allowlist
 和锁定依赖为准。维护者从 current `main` 手动 dispatch Release；它通过全部 gates
 后才创建注释 tag 并发布匹配的 GitHub Release。单独 push tag 不会触发发布。