Retire Oompa in favor of Excalibur

README.md

@@ -2,6 +2,8 @@
 
 `@hraness/oompa` supplies the `oompa` command and local daemon. It manages isolated Codex, Claude Code, and Devin profiles, persistent sessions and command records, and optional encrypted sync. Provider tools own authentication and execution; Oompa does not broker model access.
 
+> **Retired on September 19, 2026.** [Excalibur (xcb)](https://xcb.dev) supersedes Oompa. Follow the [xcb repository](https://github.com/hraness/xcb) for current development. The documentation below preserves Oompa's historical release and recovery contracts; it is no longer an active product or an installation recommendation.
+
 Local CLI v0.8.5 is a release candidate, not an admitted artifact; v0.8.4 remains the admitted canonical GitHub artifact and exact-byte npm release. Current daemon and hosted command-writer rollout remains blocked on capacity.
 
 [CLI reference](https://oompa.app/docs/reference/) · [Availability](https://oompa.app/docs/status/)

kb/plans/oompa-v1.md

@@ -14,6 +14,12 @@ tags:
 
 # Oompa v1
 
+## Retirement (2026-09-19)
+
+The owner retired Oompa in favor of [Excalibur (xcb)](https://xcb.dev). This decision supersedes the development and rollout plans below. Retain their dated evidence and recovery contracts as history; do not treat an unfinished phase as authorization to resume Oompa delivery.
+
+The retirement change adds the README successor notice. Its source delivery requires focused release-workflow and package checks, independent review, and the unchanged current-base `Required` CI gate. Archiving the repository and pausing the current website, browser app, and hosted backend are separate operational steps, with exact target readback and data preservation. A pending provider confirmation is not evidence of shutdown. Existing release artifacts, stored data, and separately installed host-scheduling tools remain preserved.
+
 Domain update, 2026-09-10: [the current domain plan](./oompa-app-domain.md) supersedes earlier host choices in this record. Current website and app destinations are `oompa.app` and `app.oompa.app`; prior hosts grant no current routing or authentication authority. Dated delivery evidence remains historical.
 
 ## Canonical site response headers (2026-09-10)

scripts/package-policy.ts

@@ -133,7 +133,7 @@ export async function assertReviewedReleaseInventory(packageRoot: string): Promi
   const expected = Object.freeze({
     count: 235,
     jsonBytes: 11_607,
-    sha256: "f24680adad7934ba885afb0e8143acb5e61dda2f461acc52aaa91afb32c02f9d",
+    sha256: "c99a409153188766957fd0e811f0e8d2b4e04c25da513d270e0f8eeb0db5d852",
   });
   const inventory: Array<readonly [string, "directory" | "file", number, number]> = [];
   const visit = async (path: string): Promise<void> => {