chore(master): release episteme 1.10.0-rc.2

[github-actions]

🤖 I have created a release beep boop

1.10.0-rc.2 (2026-07-21)

Features

• app: Episteme.app native shell + unsigned .pkg installer (Event 176) (06b5ed4)
• app: Episteme.app native shell + unsigned .pkg installer (Event 176) (0efa000)
• dist: installed users get a personal memory lane — init seeds, sync composes it (Event 178) (a7f1ce7)
• dist: installed users get a personal memory lane — init seeds, sync composes it (Event 178) (f9b9c42)
• dist: self-contained wheel — assets ship, paths resolve, privacy is structural (Event 177) (2948295)
• dist: self-contained wheel — assets ship, paths resolve, privacy is structural (Event 177) (8f2920f)
• docs: code→doc reverse index — every edit names the docs that claim to describe it (Event 173) (a236fab)
• docs: code→doc reverse index — every edit names the docs that claim to describe it (Event 173) (6d27402)
• release: release-grade packaging — generated icon, credential-ready signing tiers, release-assets workflow, app CI lane (Event 179) (1d39f51)
• release: release-grade packaging — generated icon, signing tiers, release assets, app CI lane (Event 179) (e5a6217)
• viewer: control plane — Tier 1/2 actions behind a defense ladder, Tier 3 stays deliberate (Event 175) (b383063)
• viewer: control plane — Tier 1/2 actions behind a defense ladder, Tier 3 stays deliberate (Event 175) (56b6733)
• viewer: revive episteme viewer as the live local governance dashboard (Event 174) (8ee2205)
• viewer: revive episteme viewer as the live local governance dashboard (Event 174) (c315f25)

Bug Fixes

• adapters: Event 169 — registry ⟷ implementation bijection, CI-enforced (e0b863a)
• adapters: make the registry a bijection and CI-enforce it (Event 169) (abfad36)
• app: review polish — no silent self-kill, bounded blank-launch, toolchain gate named (e0c2fb8)
• dist: close the local-build privacy leak the review reproduced — evolution lane dropped, boundary fails closed, gitignore↔packaging cross-checked (630ee22)
• dist: contract module without setuptools, CI doctor assertion names its one allowed failure (5858c4a)
• dist: pin the REAL fresh-clone shape the review exposed — overview.md is the one tracked personal file (78f8365)
• docs-map: index unresolved citations as claims — the cache must not go blind to pre-documented files (a78b52a)
• docs: Event 172 — docs tell the truth about the code; four crashed commands revived (05aaec8)
• docs: make the docs tell the truth about the code — and revive four crashed commands (Event 172) (dbd97c1)
• governance: Event 170 — operational-doc rot detector, toxic-clone hook purge, PROGRESS closure (96bc25d)
• governance: operational-doc rot detector + toxic-clone hook purge + PROGRESS tombstone closure (Event 170) (65a8edf)
• hooks: doc-path suppression must not follow symlinks out of the project (4681a74)
• hooks: Event 171 — wire the dead (pending-contracts drain, knobs writer, EPISTEME_PYTHON) + sandbox-escape fix (1c41c8a)
• hooks: wire the dead mechanisms the sweep found — pending-contracts drain, derived-knobs writer, EPISTEME_PYTHON (Event 171) (ca99fd5)
• viewer: fail-closed kill-switch, clean JSON on action failure, timing-safe token, byte-accurate cap (25bc9e9)
• viewer: read the audit schema that actually exists, never 500 on naive timestamps, warn on non-loopback bind (9ae4b23)

---

This PR was generated with Release Please. See documentation.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
episteme	Ready	Preview, Comment	Jul 21, 2026 4:23pm