[blessdyb]

Summary

Flowlight 0.17.6 is the corrected public patch for the consolidated 0.17.x redesign. It carries the complete reviewed 0.17.5 product tree forward unchanged and repairs the release-evidence authorization boundary exposed by the immutable v0.17.5 tag run:

• GitHub's release GITHUB_TOKEN reports a trusted reviewer's private organization membership as CONTRIBUTOR, while an authenticated user token reports MEMBER
• the explicit trusted-reviewer login allowlist is now authoritative instead of the viewer-dependent association label
• review evidence still requires the exact allowlisted GitHub account, exact PR targeting main, exact reviewed commit marker on its own line, numeric comment ID, exact API/HTML URLs, trusted workflow provenance, and every successful required check
• the association label remains recorded in the provenance manifest for auditability
• all consolidated AI Agents, Alerts, Policies, Sources, Live accessibility, plugin/provider, performance, CI-reuse, Pages, CodeQL, and single-signing changes remain unchanged

v0.17.5 remains immutable and unpublished. Both preparation attempts stopped at the review-evidence preflight before Xcode selection, certificate import, signing, notarization, artifact creation, or publication. Store metadata, upload, build selection, and submission remain deferred to 0.18.0.

Verification

• 1,218 native tests passed with zero failures and no first-party Swift warnings
• 90 Python classifier/release/palette/artifact/workflow/site tests passed
• 17 focused release-evidence tests passed
• a real exact-head fixture with the trusted reviewer reported as CONTRIBUTOR passes while preserving all identity, PR, SHA, URL, workflow, and check requirements
• the new regression test was proved fail-capable: restoring the old association filter reproduces the exact missing-review and missing-check failures, then passes after the deliberate regression is removed
• Xcode project drift, 53-page static site, CodeQL gate, notarization, rule-pack policy, Homebrew updater, chart palette, localization property lists, and whitespace gates pass
• the exact signed Developer product is 0.17.6 (80), with the independently versioned 0.16.3 (28) system extension; the app, extension, and response-script helper are universal, satisfy their designated requirements, and are byte-identical between archive and export
• fresh Developer executable SHA-256 values are 50c00189aca241fa3aa98c56e32309ab95bef2858edba289529ac9accaac392b, b88433b3f0185b78af987789faa0aac5ea705613381d0b293afa13bd5799d169, and b14e55738437befb0a4c98a9e85a5995e47cd40919758f68226c9fdbea04166d
• the exact unsigned Store graph is app and app extension 0.17.6 (80), universal, and contains no Developer system extension, response-script helper, privileged installer, SystemExtensions framework linkage, or OSSystemExtension symbol; executable SHA-256 values are 084c73a3de9547f7183959b918c26be1bfe0643ce11cc8ddf986eaa258bc1d31 and 866bcff2fd25c80847764631938fa356051926d05662e263c101fd9c8bc894b3
• real-machine acceptance passed for Live, AI Agents, and Connections at 1000 × 660 using only synthetic demo.sqlite; each exact candidate PID was path-verified and stopped after capture
• independent security review found no verified HIGH or MEDIUM authorization bypass in the correction

🤖 Generated with Claude Code

[blessdyb]

Independent security and release-correctness review completed against the exact committed correction. The configured reviewer login allowlist remains the authorization boundary; GitHub-authenticated login, exact PR/SHA marker, numeric comment ID, exact API/HTML URLs, trusted workflow provenance, linked pull request, and successful required checks remain enforced. The viewer-dependent association label is retained as evidence only. No verified HIGH or MEDIUM blocker survived at 9/10 confidence.

Reviewed-Commit: 3bd9387

[blessdyb]

Superseded by #86 after immutable v0.17.6 completed signing and Apple notarization but failed before artifact retention when Apple CloudKit ticket delivery lost the connection during DMG stapling. v0.17.6 remains unpublished and untouched.