chore(main): release jarvos-bootstrap 0.10.0

[jarvos-release-bot]

🤖 I have created a release beep boop

0.10.0 (2026-09-04)

Features

• active-assistant: add harness-neutral service contract (bf155d8)
• active-assistant: define jarvOS-owned service boundary (56eff4e)
• add capability truth ledger contract (8303902)
• add runtime mode routing contract (58d9344)
• add safe existing-installation sync flow (f70c507)
• ambient: add candidate envelope contract (c6c3bc7)
• control-plane: add portable identity contract (bf49cb2)
• control-plane: add promotion receipt contract (15cda24)
• doctor: add profile-aware System Doctor (#277) (811a734)
• gbrain: activate shared continuity across harnesses (d1b65e7)
• gbrain: activate shared continuity contract (5e82686)
• make starter templates runtime-neutral (8d7e663)
• projects: carry context across every harness (#244) (db63fdf)
• runtime-kit: add constrained generation contract (ab1c8e8)
• runtime: add generic runner state compatibility reads (b01ff58)
• runtime: add generic runner state compatibility reads (3f7c962)
• runtime: add Grok Bot remote HTTP/SSE adapter (4514e90)
• runtime: add tiered harness conformance admission (965c45f)
• runtime: add tiered harness conformance admission (f73b7b9)
• runtime: bridge common work across harnesses (af427a6)
• runtime: bridge common work across harnesses (1f06808)
• runtime: expose canonical work bridge (ce34fc5)
• storage: add portable capacity admission contracts (#276) (96ba9aa)
• storage: release unused capacity reservations (#281) (2a2ae97)
• sync with an existing jarvOS installation (#248) (9a1384b)
• sync: connect an existing jarvOS installation (a746541)

Bug Fixes

• active-assistant: accept quoted sentence endings (7ec1eda)
• active-assistant: accept quoted sentence endings (12d7559)
• active-assistant: bind governed delivery invariants (2e346d0)
• active-assistant: preserve selection and replay integrity (4758b20)
• active-assistant: reject opening quote suffixes (febd6ba)
• advance merged capability truth states (2f82ac9)
• advance merged capability truth states (370387e)
• canonicalize init vault containment (dc0f17e)
• ci: refresh Hermes skills manifest pin (e7c2944)
• ci: satisfy continuity documentation gates (f6786ef)
• doctor: require runtime-effective paths (d482a91)
• doctor: restore compact eleven-row status (#280) (af943b7)
• gbrain: harden continuity evidence (5d4b7b8)
• guard init vault boundaries (fa16232)
• harden existing-installation sync safety (f5fba72)
• harden foundation contract truth boundaries (7603ae6)
• harden foundation timestamp validation (8d41a2d)
• init: attach existing vaults safely (8c54120)
• init: fail closed on existing workspaces (#251) (5b7a31e)
• init: fail closed on existing workspaces (#251) (d98ef85)
• init: harden compatibility write boundary (e984740)
• init: make file publication race-safe (6e69bf0)
• init: reject ambiguous and symlinked targets (#251) (2ca2297)
• init: validate explicit path environment (#251) (2c1449b)
• keep dormant vault checks non-mutating (87a8846)
• mcp-http: harden Streamable HTTP session isolation (1b788da)
• projects: admit nested projects in context packets (bd2f501)
• projects: admit nested projects in context packets (1ed6c29)
• projects: bind consumers to one packet contract (4ac93a5)
• projects: bind consumers to one packet contract (U1, U2) (b4ccc78)
• projects: fail closed on inconsistent bindings (f88bd3b)
• reject symlinked compatible install files (073fca4)
• release: recognize Release Please tags (a63f2ff)
• runtime-kit: fail closed on unproven generation proof (32ca74a)
• runtime-kit: reject untrusted generation verification (3cb8b6c)
• runtime: align managed work and release drift checks (e64df8d)
• runtime: constrain Telegram route identities (2e2cda7)
• runtime: harden runner state compatibility reads (17babe4)
• runtime: keep runner state reads private (a205263)
• secondbrain: make hard capture commands terminal (5f7c6fa)
• skills: finish clean workflow PRs autonomously (ef62b42)
• skills: finish clean workflow PRs autonomously (e2e0608)
• sync: align doctor with resolved runtime paths (17abb8d)
• sync: allow verified macOS parent aliases (fe9acc3)
• sync: close migration safety gaps (91ef75a)
• sync: enforce portable config invariants (70cdf84)
• sync: migrate compatible legacy configs (bfe01d7)
• sync: normalize equivalent runtime overrides (9197296)
• sync: normalize existing runtime path checks (b93ae61)
• sync: preserve legacy runtime safety (87f6c9b)
• sync: recognize omitted derived config paths (142ac5d)
• sync: reject ambiguous runtime path traversal (e6cf68a)
• sync: reject divergent overrides before create (5e6e55e)
• sync: revalidate config creation paths (546022b)
• validate runtime modes in minimal doctor (0f9fff4)

---

This PR was generated with Release Please. See documentation.