release: DS Agent v1.3.0 exact-task authorization

[Lee-take]

Summary

• publish Step 3 exact-task grouped authorization as DS Agent v1.3.0
• keep approval limited to exact authority: no tool execution, task resume, Goal completion, Office, connector, or Computer Use expansion
• make Windows GNU application and NSIS packaging reproducible by stripping target-path-bearing COFF symbols, omitting PE timestamps, and excluding payload mtimes

Reproducibility root cause and proof

The earlier two clean builds differed because GNU COFF symbol/string tables embedded target-specific temporary paths, PE headers carried build timestamps, and NSIS saved payload mtimes. Two final fresh isolated builds now match exactly:

• ds-agent.exe: 34,253,824 bytes; SHA-256 342C0DABDB9AD3401496E8F7A11D63841CECD604AADBC3B18CAE5EDC3AE997AA
• DS.Agent_1.3.0_x64-setup.exe: 11,323,811 bytes; SHA-256 7EB672A7AE1030AF992A84169FED696636FAB46AEA3CEB4EC96A37FDF9EA27ED

Both binaries are intentionally Authenticode NotSigned; no signer is claimed. The SignPath application remains submitted/pending.

Verification

• focused C3D production seam: 4 passed
• C3A manifest/risk/preview: 15 passed
• C3B/C3C durable grouped authorization: 15 passed
• Goal lifecycle/completion: 14 passed
• legacy exact-tool: 4 passed
• policy: 10 passed
• grouped authorization UI/IPC boundary passed
• production frontend build: 1,604 modules
• full pinned pnpm@9.15.9 test passed (957 Rust tests discovered; 7 documented live/installed tests ignored)
• test:release-source, offline test:release-local -- --skip-live-deepseek, secret scan, cargo fmt --check, and diff checks passed
• two final independent NSIS builds are byte-identical

No real API key, production account, paid API, installed-app overwrite, or external target was used.