[backslash-f]

Summary

• simplify the README for Codex and Claude Code users, with focused setup and capability guides
• regression-check documentation against the registered tool catalog and deny-by-default boundaries
• distinguish an absent npm version from an existing one during release publication
• accept a one-time manual bootstrap only when its registry SHA-512 exactly matches the inspected release tarball
• retain OIDC publication for versions not already present and fail closed on mismatches or registry errors

Validation

• npm run check
• git diff --check
• 85 tests pass, including documentation contracts, release workflow, and exact-artifact coverage

Safety

• no package or GitHub release was published
• no npm or repository credential was read or changed

[backslash-f]

Exact-head Reasoning Relay review: APPROVED.

• Base: e193c366de335fcc74d8ae80faac5a4c1df55dc4
• Head: 4f6ac54334d7cdf6708113e3ff3c152d2cf1667e
• Response hash: 7a9abab5d92ef024a01dfbe913384f34d1e5a163354e5ca971ef0a5661d582a6
• Decision: no P0/P1 findings; suitable to merge before the separately authorized release.
• Exact-head CI run 34835505416 is green.

Non-blocking observations were recorded for future hardening: executable negative-path reconciliation tests, two small setup wording refinements, and tag-pinned documentation links.