main
feat: pending work completion — 13 DB syncs, 7 new infra scripts, carrier lockstep, hardware docs
feat(scripts): add helix_ota consumer host-safety lib (§12 / §11.4.177 decoupled)
feat: production readiness gap closure — all 47 gaps closed across 7 phases
chore(workable-now): full verification sweep — gofmt, §11.4.166 semgrep, A/B re-proof, recordings, Status reconcile
fix+docs(distribution+cuttlefish): real-deploy bug fixes + operator runbook + honest Status reconciliation
feat(parallel): CodeGraph MCP + stress/chaos tests + docs_chain + RAUC RED baseline
feat: close 7 workable items — telemetry schema, network fixes, QA gate, CLI tests, evidence coverage
fix(tooling): commit_all.sh --paths index isolation (item E, §11.4.84 leak root-cause)
feat(cuttlefish): Tier-2 A/B VERIFIED (real update_engine slot-flip + auto-rollback) + F114 compose relocation
chore(constitution): adopt e60cbde carriers+gates+fixes (main batch; deletion split to bb3b418)
feat(stats): OTA-002 Build resource stats tracker (§11.4.24)
fix(push): portable mkdir lock + honest exit in push_all.sh (§11.4.67/§11.4.1)
feat(cuttlefish+rk3588): pkg/cuttlefish containers extension + real RK3588 control-plane validation + rootful exception + distribution repoint
fix(recording): asciinema .cast → H.264 MP4 pipeline (§11.4.159)
chore(scripts): add scaffold_submodule.sh; scaffold 6 new submodule repos
feat(helixtrack): bidirectional sync — pull script now writes back to workable_items.db
test+docs(parallel-hardening): real coverage gains across 5 streams + §11.4.65 PDF backfill