Complete HRA friend-beta operations and acceptance

[0thernet]

Summary

• add atomic hosted admission, bootstrap recovery, quotas, invitation operations, and fresh-deployment controls
• add the source-only two-installation live acceptance and recovery gate for accounts, sessions, HITL, devices, encrypted sync, presence, revocation, and cleanup
• harden immutable release staging and local numeric-ID publication with dual SPDX evidence and exact public-install acceptance
• finish file-isolated Codex installations, credential-store preflight, bounded plugin discovery, and public friend-beta operations documentation

Validation

• complete exclusive root gate: ESLint, TypeScript, 859 tests across 80 files, generated-site parity, CLI/site builds, and isolated local/global package acceptance
• independent harness and release reviews: no P0, P1, or P2 findings
• KB percolation, refresh, and graph validation pass

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
hra	Ready	Preview	Aug 23, 2026 6:19pm