release(T13855): plan v2026.10.20

[kryptobaseddev]

Release plan for v2026.10.20. It adds only .cleo/release/v2026.10.20.plan.json (force-added past the .cleo/ ignore) and the CHANGELOG.md section.

• Release source: 2ec783b (feat(T13884): pass CLEO_HOOK_PROVIDER to the goal tick #2361 merge). Main CI 39073614333 is green there.
• Scope: 21 done tasks with complete evidence (cleo release plan --channel latest --tasks …; the readiness preflight passed). "Also in this release" lists T13834, T13857 and T13881, whose tasks are still open.
• Release notes include, verbatim: "Rotate any token you passed to cleo service connect on an earlier build: older builds wrote it to the synced audit log (fixed in this release, T13855/T13857)." Cross-device sync (Stage C) stays off on stable.
• Qualification: GitHub CI plus one light local smoke, per the owner directive against heavy local runs.
  • The smoke used the published-layout CLI from CI's packed artifact for 2ec783b (18 tarballs), installed in a sandbox and run against a copy of the real cleocode store with HOME and CLEO_HOME sandboxed.
  • --version 2026.10.19, show, find, briefing, session status, doctor and hook stop all exit 0.
• Plan file sha256: dae50d348f7d23d417bd1c5301f81e4630a10f5ada3f267dc6db7aa38dee0743

Not merged, not dispatched, not tagged.

🤖 Generated with Claude Code