[abrichr]

Prepares openadapt-flow 2.3.0. Nothing is published by this PR; release-package.yml publishes after it merges.

What changes

• Version. packages/flow/pyproject.toml, openadapt_flow.__version__ and the editable root in packages/flow/uv.lock are 2.3.0 (check_release_consistency.py --sync).
• Changelog. ## v2.3.0 (2026-10-20) in packages/flow/CHANGELOG.md covers everything merged since openadapt-flow-v2.2.0, including the PRs folded into batch PRs batch: API-step fixes, compatibility matrix and local-edit classification (#1370 #1371 #1372 #1364 #1374 #1366) #1383, batch: repair, safety, teaching agents and evidence (#1375 #1360 #1359 #1354 #1335 #1357 #1298 #1291 #1346) #1384, batch: benchmark, scoreboard and README (#1340 #1352 #1380 #1365 #1338) — after #1384 #1385 and batch: teach scope, run authorizations, redaction, merge queue, main dedupe, Desktop program map, tray fold #1421. CI, test-only, scoreboard and benchmark-data PRs are left out.
• openadapt-types 0.24.0 changelog. Flow 2.3.0 requires openadapt-types>=0.24.0,<0.25.0 (refactor(types): make openadapt-types the pydantic-only leaf again #1270), and PyPI has 0.23.0. release-package.yml needs a dated entry at the top, so packages/types/CHANGELOG.md gets one. Its version is already 0.24.0 in packages/types/pyproject.toml.
• sdist boundary. Adds "/benchmark/**/*openimis*" to the sdist excludes. Since 2.2.0, openIMIS runs, tasks and results were committed under benchmark/auto_repair, benchmark/scoreboard and benchmark/undo_proposal. Without the exclude they ride in the sdist, and the workflow's --validate-dist-dir step refuses it ("repository-only openIMIS benchmark material outside the MIT package boundary").
• llms-full.txt regenerated. The command map has no changes.

Not changed:

• platform-manifest.json pins published versions only, and the 2.2.0 release left it alone too.
• The "On main" rows in CAPABILITIES.md describe code that ships once 2.3.0 is on PyPI. They change after the publish.

Publish order

1. release-package.yml with package=types, version=0.24.0
2. release-package.yml with package=flow, version=2.3.0

If flow publishes first, pip install openadapt-flow==2.3.0 can't resolve its types requirement.

Local checks

• Flow release-contract, release receipt, publication, release CI gate, contracts alias, capability map and CI workflow contract tests: 117 passed.
• Built the wheel and sdist after --stamp-release-inventory. --validate-dist-dir passed ("Distribution license boundary passed"), the sdist has no openIMIS paths, and twine check --strict (7.0.0) passed both archives.
• ruff check and ruff format --check (0.17.0) on openadapt_flow are clean.
• The prospect-name check is clean.

🤖 Generated with Claude Code