[jpicklyk]

Summary

P26 (X1), the 4.0.0 release PR into release/4.0. This PR does not land on main, does not tag, and does not publish; those steps are the user's gate.

• Versions: version.properties 4.0.0; server.json version 4.0.0, OCI ghcr.io/jpicklyk/task-orchestrator:4.0.0, a description naming profiles and runs, and the UPGRADE_BACKUP stamp spelled <yyyyMMddTHHmmssZ>; plugin task-orchestrator 4.0.0 in plugin.json and .claude-plugin/marketplace.json; task-orchestrator-mod 0.2.0.
• CHANGELOG.md: [Unreleased] cut into ## [4.0.0] - 2026-10-17 with "Upgrading from 3.x" on top and the Plugin 4.0 entry, with an empty ## [Unreleased] left above it. The lock wait (300 s, no env key) is release-noted, and the .bak stamp has one spelling everywhere.
• claude-plugins/CLAUDE.md: the version and compatibility tables, with the 3.x pin written as the release/3.x ref (P25 D2).
• .claude/skills/prepare-release/SKILL.md: the point-release path (both plugins, categories Added/Changed/Removed/Fixed/Security/Plugin, the empty-[Unreleased] rule, the data-step and UPGRADE_BACKUP lines kept in a major release body) and a "Major release landing" flow. That flow covers:
  • cutting release/3.x first
  • a twin audit of main-only commits
  • a land/4.0.0 branch that retires the guard job and records main with merge -s ours
  • the ruleset edit for the required guard check
  • ONE merge commit, never squash
  • tagging from main
  • docker-publish and the wiki
  • the plugin cache refresh
• fleet-deployment.md and the smoke scripts: the two-boot wording and the 4.0.0 tag.

Test Results

• Forced full Kotlin suite (:current:test + ktlintCheck, --rerun-tasks): BUILD SUCCESSFUL in 6m 18s. The version-embedding goldens normalize metadata.version.
• node --test over scripts/tests/*.test.mjs and hooks/tests/*.test.mjs: 2444 pass, 0 fail. Four tests that pinned item bullets under [Unreleased] now read ## [4.0.0] (oracles unchanged, 97416043).
• gen-call-shapes.mjs --check: fresh.

Review

Independent docs-accuracy review (Fable, task-orchestrator:reviewer): Pass, 0 blocking. Every operator-facing claim was opened at its source line (backup stamp, 300 s lock, failure names, env parity across 46 names, docker-publish/sync-wiki/test/guard workflows, both rulesets, the merge -s ours recipe and the 270 conflicting paths). N1-N5 were fixed in e858530d: the resolve-changelog path, the conflict count, folding post-cut [Unreleased] before the landing leaves draft, dropping the never-released freeze-guard bullet, and the release/3.x pin caveats. N6 and N7 were accepted (details in orchestrator-confirmation). origin/release/4.0 (#620-#622) was merged in at 3d6f94ac; its two Plugin bullets sit inside ## [4.0.0].

Docs

• CHANGELOG.md
• claude-plugins/CLAUDE.md
• .claude/skills/prepare-release/SKILL.md
• current/docs/fleet-deployment.md

MCP

95c660e2-617b-49ef-8eb3-4f1820f9fb8b (P26, W7; run r-202610171521-95c660e2). The landing twin audit found main's #574 without a 4.0 twin; twin item a3d6a64a. Bullets merged into release/4.0 after this branch's base are folded into ## [4.0.0] before merge.

🤖 Generated with Claude Code