chore(main): release faff 0.9.0

[github-actions]

🤖 I have created a release beep boop

0.9.0 (2026-07-07)

Features

• FAFF-260: PRD-admissibility LLM validator — slot-skill, gateway entry, L4 run-start wiring (#274) (e52c9ae)
• FAFF-312: L4 run governance — run-done terminates, Sentry interrupts, budget backstops (count-caps banned) (#265) (02df7d0)
• FAFF-329: prevent + cheaply recover the graft mid-review stall (#273) (d4e80b5)
• FAFF-334: per-issue build-model routing by spec confidence (#268) (4b364e7)
• FAFF-346: wire the architecture slot call-site (prep-time proposal, holdout consumption) (#283) (ae2cc9c)
• FAFF-350: faff merge-gate — mechanical merge floor + branch-protection preflight (#264) (3f82c02)
• FAFF-353: escalate Phase-2 adversarial criticals on any autonomous run + annotate full-chain outage (#271) (04eb5c4)
• FAFF-356: optional (decides: <owner>) tag on Punt markers + per-owner routing (#270) (d843871)
• FAFF-357: faff economics — per-run unit economics (cost-per-shipped-issue) (#269) (0770de5)
• FAFF-368: re-validate ADR numbering at the merge gate, renumber on collision (#288) (a42614b)
• FAFF-371: validate + harden the env lane against a bounded rootless engine (#278) (abbfff9)
• FAFF-372: dispatch interactive L2 producers as Agent subagents + per-producer model lanes (#276) (6e6fa4e)
• FAFF-373: corrective-integrity fail-safe gate (probe + degrade-to-Channel-D) (#277) (833350c)
• FAFF-376: pin observed head sha through merge-gate + fail-closed on partial gh API (#281) (5dc0366)
• FAFF-379: make the L4 lights-out floor:worktree_isolation a real check (#280) (2bcbfe9)
• FAFF-398: fail-closed on mandatory review-chain exhaustion (#284) (ca03cb9)
• FAFF-402: build-complete checkpoint + push-at-build-complete resumability (#287) (dc2d402)

Bug Fixes

• FAFF-369: correct merge-gate CI classification on Actions-only repos (+ FAFF-366) (#272) (ce85976)
• FAFF-375: harden merge-gate flag surface — drop --admin, fence --human-override/--allow-no-ci on a real TTY (#285) (955d5b2)
• FAFF-378: gate the L4 appetite pin on run liveness (runIsHeld) (#279) (cadb4a8)

---

This PR was generated with Release Please. See documentation.