Repair descendant liveness qualification

Repair escaped launch attribution

Bind approvals to installation epoch

repair collected launch recovery across epochs

repair incident-store discovery availability

Repair terminal history pruning after boundary cleanup

Serialize owned containment with autonomous detection

Repair autonomous boundary cleanup

Repair approval admission race and boundary recovery

Repair approval revocation enforcement

fix: reject noncanonical release archive paths

fix: reject ambiguous release archive framing

fix: authenticate public release assets

fix: repair public 1.0 operator paths

fix: restore supervisor after host reboot

fix: redact preflight operator errors

feat: add read-only first-kill preflight

Launch first-kill social campaign surface