openkal-platform 0.23.3 selects the corrected confinement graph (#697)

Index immutable platform 0.23.3 for the corrected Linux confinement graph. All non-exempt checks pass. The three failed candidate jobs have each been inspected and fail only because index CI mcpp 2026.11.2.1 is older than the required 2026.11.3.1; no package compilation occurs. Apply the explicit bootstrap exception in mcpp-community/mcpp#885. Local source-image and actual indexed hosted tests pass with the 2026.11.3.1 candidate. Full producer four-host qualification remains required before its PR merges.

Co-authored-by: speak-agent <248744407+speak-agent@users.noreply.github.com>

Author: Sunrisepeak

CHANGELOG.md

@@ -15,6 +15,8 @@
 
 ### Added
 
+- **openkal-platform 0.23.3.** Both image and hosted arrangements select the corrected Linux confinement graph: Linux 0.24.1, musl 0.27.3, llvm-runtime 0.18.4 and image 0.4.3. It requires mcpp 2026.11.3.1. GLOBAL and CN archives have the same verified SHA256.
+
 - **openkal-llvm-runtime 0.18.4.** Both allocator arrangements select openkal-musl 0.27.3, which propagates Linux 0.24.1 and image loader 0.4.3. The C++ runtime implementation is unchanged. The openkal test member follows the release for musl targets. GLOBAL and CN archives have the same verified SHA256.
 
 - **openkal-musl 0.27.3.** The Linux dependency selects openkal-linux 0.24.1 for correct read-only confinement, and the image dependency selects openkal-ld 0.4.3. The C library implementation is unchanged. The Linux test member follows the release. GLOBAL and CN archives have the same verified SHA256.

pkgs/o/openkal-platform.lua

@@ -26,6 +26,13 @@ package = {
 
     xpm = {
         linux = {
+            ["0.23.3"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/openkal-platform/archive/refs/tags/0.23.3.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/openkal-platform/releases/download/0.23.3/openkal-platform-0.23.3.tar.gz",
+                },
+                sha256 = "83968cd52726dc30522a55779c48db584ca24a986eadac18e655813da6625422",
+            },
             ["0.23.2"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/openkal-platform/archive/refs/tags/0.23.2.tar.gz",
@@ -133,6 +140,13 @@ package = {
             },
         },
         macosx = {
+            ["0.23.3"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/openkal-platform/archive/refs/tags/0.23.3.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/openkal-platform/releases/download/0.23.3/openkal-platform-0.23.3.tar.gz",
+                },
+                sha256 = "83968cd52726dc30522a55779c48db584ca24a986eadac18e655813da6625422",
+            },
             ["0.23.2"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/openkal-platform/archive/refs/tags/0.23.2.tar.gz",
@@ -240,6 +254,13 @@ package = {
             },
         },
         windows = {
+            ["0.23.3"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/openkal-platform/archive/refs/tags/0.23.3.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/openkal-platform/releases/download/0.23.3/openkal-platform-0.23.3.tar.gz",
+                },
+                sha256 = "83968cd52726dc30522a55779c48db584ca24a986eadac18e655813da6625422",
+            },
             ["0.23.2"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/openkal-platform/archive/refs/tags/0.23.2.tar.gz",