AlphaLab: integrate research workflows and global derivative lifecycle

.github/workflows/preflight.yml

@@ -6,12 +6,15 @@ name: Release Preflight
 # CodeQL and benchmark gates, while there is still nothing to take back.
 #
 # Which commit it validates, and how it refuses to validate the wrong one:
-#   * A push to the v4.1.0 candidate branch, work/v4.1.0-release-hardening: the
+#   * A push to the v4.2.0 candidate branch, work/v4.2.0-release: the
 #     commit pushed, and only that -- the run's commit must be the pushed tip
 #     (github.event.after), the ref must be that branch, and a deletion is
 #     refused: when a branch is deleted GitHub reports the DEFAULT branch's
 #     commit for the run, which is how a push trigger could validate `main`.
-#     This route needs nothing on `main`. Retarget or remove it after v4.1.0.
+#     This route needs nothing on `main`. Retarget or remove it after v4.2.0.
+#     (v4.2.0's development branch is work/v4.1.1-future-readiness, named before
+#     the number was chosen; a candidate pushed for release goes to
+#     work/v4.2.0-release, or is validated by labelling its pull request.)
 #   * Run manually ("Run workflow"): the commit of the branch or tag chosen under
 #     "Use workflow from". The `candidate` input must repeat that name, so a run
 #     left on `main` by mistake fails in its first step instead of validating
@@ -34,13 +37,13 @@ on:
         required: true
         type: string
       expected_version:
-        description: "The version this release will be, e.g. 4.1.0 (its tag is v<version>)"
+        description: "The version this release will be, e.g. 4.2.0 (its tag is v<version>)"
         required: true
         type: string
   # The candidate branch alone; never main. The guard below names it again.
   push:
     branches:
-      - work/v4.1.0-release-hardening
+      - work/v4.2.0-release
   pull_request:
     branches:
       - main
@@ -78,7 +81,7 @@ jobs:
           REF_NAME: ${{ github.ref_name }}
           RUN_SHA: ${{ github.sha }}
           # The branch on.push.branches names; a test holds the two together.
-          PUSH_BRANCH: work/v4.1.0-release-hardening
+          PUSH_BRANCH: work/v4.2.0-release
           PUSHED_SHA: ${{ github.event.after }}
           PUSH_DELETED: ${{ github.event.deleted }}
           HEAD_SHA: ${{ github.event.pull_request.head.sha }}
@@ -138,7 +141,7 @@ jobs:
           python-version: "3.12"
 
       # The candidate must BE the release, not merely agree with itself: a tree
-      # whose every reference says 4.1.1 fails here. A manual run names the
+      # whose every reference says 4.2.1 fails here. A manual run names the
       # release in expected_version; a push or a labelled pull request is the
       # candidate branch's release, RELEASE_VERSION (a test holds it to the
       # package's version and to the push branch's name).
@@ -147,7 +150,7 @@ jobs:
         env:
           EVENT: ${{ github.event_name }}
           DISPATCHED_VERSION: ${{ inputs.expected_version }}
-          RELEASE_VERSION: "4.1.0"
+          RELEASE_VERSION: "4.2.0"
         run: |
           set -euo pipefail
           if [ "${EVENT}" = "workflow_dispatch" ]; then

README.md

@@ -7,7 +7,7 @@
 **Deterministic • Immutable • Fully typed • Zero runtime dependencies**
 
 [![Python](https://img.shields.io/badge/Python-3.12+-3776AB?logo=python&logoColor=white)]()
-[![Version](https://img.shields.io/badge/Version-4.1.0-blue)]()
+[![Version](https://img.shields.io/badge/Version-4.2.0-blue)]()
 [![License](https://img.shields.io/badge/License-MIT-green.svg)]()
 [![Typing](https://img.shields.io/badge/MyPy-Strict-blue)]()
 [![Style](https://img.shields.io/badge/Ruff-Clean-red)]()
@@ -45,16 +45,16 @@ It exists to answer the questions that decide whether a backtest means anything:
 
 # Release Status
 
-**Current Release:** **v4.1.0 — a replay that pauses and resumes durably to the identical result, CPython 3.12 to 3.14 on Linux and macOS, run identities that no longer depend on the host, and release verification fixed at its root -- additive on the v4.0 contract**
+**Current Release:** **v4.2.0 (release candidate, not yet published; the published tag is v4.1.0) — every timed input on every driver, several datasets in one run, contracts declared and carried through exercise, assignment, expiry and delivery, execution algorithms and a queue model on the historical drivers, settlement, margin, financing and borrow on declared terms, venue controls and auctions, corporate actions and their corrections, volatility surfaces and auction information delivered during a run, typed strategy configuration -- additive on the v4.0 contract**
 
 | Metric | Status |
 |---------|--------|
 | Python | CPython 3.12, 3.13, 3.14 (Linux, macOS) |
-| Version | 4.1.0 |
+| Version | 4.2.0 |
 | Runtime dependencies | **None** (standard library only) |
-| Tests | **9,672 passing, 0 skipped, 0 warnings** (each of CPython 3.12, 3.13, 3.14) |
+| Tests | **10,841 passing, 0 skipped, 0 warnings** (each of CPython 3.12, 3.13, 3.14) |
 | Static typing | **Strict mypy**, repository-wide |
-| Examples | **71 / 71** |
+| Examples | **79 / 79** |
 | Release certificate | [11 / 11 checks](docs/audit/RELEASE_CERTIFICATION.md) |
 | License | MIT |