[kikashy]

Milestone: v0.14.0. Release preparation for the completed #70 → #65 → #69 → #71 batch, merged through #74, #72, #75 and #73.

Change

Set the kit version and all five version headers to 0.14.0, and add release notes describing the changes, evidence and operating limits. The notes preserve the distinction between live API plan replay and hosted execution, cooperative RSS guarding and containment, and kit publication and consumer adoption.

No product logic, consumer repository or release workflow changes.

Acceptance mapping

Requirement	Implementation	Verification	Remaining gate
Matching release identity	JPDEV_VERSION and versioned script headers	Full checklist; packaged jpdev reports 0.14.0	Complete
Complete release scope	docs/releases/v0.14.0.md covers all four milestone issues	Full release diff against v0.13.0 identified	Complete
Published verified artifact	Existing signed-tag and protected release workflow	Signing preflight passed; candidate package smoke test passed	Complete: published and verified as v0.14.0

Checks

Clean candidate: eaafb806a06f20e0e1ce48ed891f5a5a9c8f92bf; no uncommitted diff. Executed scripts/dev/check.sh --all once under the configured shared lock. Only the machine-local interpreter path is omitted:

== check summary (dev.json) ==
PASS     diff-check               0s
PASS     local-paths              0s
PASS     agent-docs               0s
    sync-agent-docs: CLAUDE.md matches AGENTS.md
    sync-agent-docs: CLAUDE.md matches AGENTS.md
PASS     bash-n                   0s
    bash -n: every script parses
PASS     duplication              0s, python [interpreter path omitted] (Python 3.12.11)
    duplication: no duplicate block (at least 100 tokens over at least 10 lines, 23 files of python, shell)
PASS     json                     0s, python [interpreter path omitted] (Python 3.12.11)
    parsed 14 JSON documents
PASS     shellcheck               5s
    shellcheck: clean
PASS     tests                    109s
    449 passed, 0 failed
== 8 passed, 0 failed, 0 skipped, 0 not run ==

The archived candidate's bin/jpdev --version and bin/jpdev env passed. Its archive is preparation evidence; final published bytes were rebuilt from and verified against the signed tag's commit.

Review and release status

Merged as 9f555498a9e4c35d426ca1ce45352abf3363cbb3, with tree equality to the reviewed candidate verified. Exact-head CI 41318039623 passed. The independent complete-release review reports no findings and identifies the same-vendor reviewer and model. Main CI 41318438052 passed. Release v0.14.0 is published, immutable and latest. Release workflow 41318695912 passed; signed tag, draft approval, checksums, reproducible archive, both provenance attestations and post-publication asset verification are complete. No consumer rollout.

[kikashy]

Independent complete-release review of judgment-pack-devkit v0.14.0 and PR #76.

Release range: 939b0377e57e1d09964e3b4d5dc4c45ad70c7854 (v0.13.0) → eaafb806a06f20e0e1ce48ed891f5a5a9c8f92bf
PR #76 base: d99971413d6aba059abce9e81770f793907dc7b7
PR #76 head: eaafb806a06f20e0e1ce48ed891f5a5a9c8f92bf

Reviewer: OpenAI / gpt-6.1-sol / high reasoning, retained for the combined trust-boundary and concurrent process-lifetime changes. Independent same-vendor review; not cross-vendor.

Findings: none.

Reviewed the complete release diff against its contracts and release notes, applicable instructions, operating policy and release procedure. Reused the #74 clean-room security evidence and independent #72, #75 and #73 review records. The changes preserve admission, wrapper controls and publication gates; the notes accurately state replay, RSS-guard and rollout limitations.

PR #76 contains only the version, five headers and release notes. Versioned source copies and generated instructions match. The candidate archive identifies the reviewed head, and all 59 packaged regular files match its contents. Package smoke evidence reports jpdev 0.14.0.

Validation reused:

• Full local checklist: eight PASS; 449 tests passed.
• Verified exact-head CI 41318039623: lint, tests and DCO successful.
• Existing focused probes and safeguard-removal evidence; no broad suites repeated.

Remaining gates: merge, successful main CI at the merged commit, signed annotated tag, release-evidence admission, rebuilding the final archive from that commit, checksum and provenance verification, protected publication approval, and post-publication asset verification.

This establishes source-candidate review completion. Published artifacts are not yet available. No tracked files or Git state changed; no publishing performed.

Disposition:

Finding	Action
None	Source review complete. Continue the authorized release through the listed publication and verification gates.

[github-actions]

🎉 Thank you for your contribution to Judgment Pack!

If you’d like another task, choose a path that interests you:

• Go runtime
• Judgment desk
• Gateway and provenance
• Python and evaluator experiments
• Specification and documentation
• Agent harness and adapters

[kikashy]

Published judgment-pack-devkit v0.14.0.

• Reviewed PR head: eaafb806a06f20e0e1ce48ed891f5a5a9c8f92bf.
• Released main commit: 9f555498a9e4c35d426ca1ce45352abf3363cbb3; its tree equals the reviewed candidate.
• Signed annotated tag object: 7b6cb86187493c7aed3533fc106afe8fbef1bf88; signature verified and remote tag unchanged.
• Complete release review: no findings, independent same-vendor review.
• Local checklist: eight PASS, 449 tests passed. PR CI and main CI passed at their exact commits.
• Release workflow succeeded. Its evidence gate decided reuse; conditional runner revalidation was skipped as designed.

Before publication, the draft notes matched the tagged source, the exact two assets matched their API digests, the tarball matched a reproducible archive of the released commit byte-for-byte, and both attestations verified against the repository, release workflow, tag ref and exact source digest. The existing release environment was approved under the maintainer's explicit release authorization after those checks.

After publication, release 430653647 is immutable, non-draft, non-prerelease and latest. Notes and both asset digests remain identical to the verified draft; the workflow's post-publication verification passed.

Asset	SHA-256
judgment-pack-devkit-0.14.0.tgz	fa3e6c5cabf8a5265198664e246400afeace9270c9ab425fca9906dedddf8814
checksums.txt	c592bca63b7815c3bc6d42624a505896c08f665c98050a78a3b95d555aadd62d

Disposition: all release gates complete. Consumer adoption remains separately authorized work; no consumer copies changed.