[herefindalex]

Merge the existing feat/gar-v0.1 branch into the default main branch, preserving its 12 commits.

Changes

• Fixed-service Python/React sandbox with execution visibility and approval/revalidation coverage.
• GAR v0.1 deterministic Go core: immutable scope and intent, exact owner approval, durable SQLite ownership/journal, idempotency, STALE and UNKNOWN semantics.
• Authenticated ten-tool MCP transport, read-only Paper/itzg adapters, GARGuard snapshots and fail-closed IPv4/IPv6 admission.
• G-02 real Login Start and host-recovery evidence, including provenance and exact target bindings.
• UNIT/FAKE_TARGET graceful-stop and offline-backup foundation through S05, durable verified backup records and crash/reopen tests.

Release boundary

G-01 and G-02 PASS for the documented evidence. G-03 remains NOT_RUN, G-04 FAIL, and G-05/G-06/G-07 NOT_RUN. The recovered guard build digest is recorded separately from the historical read-only artifact.

The live mutation entry point remains disabled. S06–S10 are blocked, and there is no live stop/backup execution route or plugin replacement executor.

Validation

Head commit: 0728c0c2ba2c059ea6dccb934acb2cf08b983986. The current main tip is an ancestor of this head.

• CI passed: Go race tests and vet, Java guard build/tests, Python tests/lint, React build, container build and smoke test.
• Secret scan passed.
• Local Go checks also passed; real G-02 HOST_RECOVERY evidence is recorded in compatibility.lock. CI and fake-target tests do not establish real G-03 acceptance.