docs: release entry for helixconstitution-v73 with verified/provisional/open labelling; README availability no longer placeholder

fix(installer): validate settings.json strictly on jq and python paths (empty/null/multi-doc/malformed refused, post-merge verification), cap new-file modes at 0644, warn on symlink replacement, refuse directory; tests and mutants

fix(installer): stat -L mode preserve, umask-respecting new files, python refuses invalid JSON, hard-link snapshot warns instead of refusing; tests with real-JSON fixtures and mutants; docs

fix(deps): re-pin llmctl and claude_toolkit manifest refs to the recorded gitlinks (a1bf949, 25c4803)

chore: set executable bit on six shebang scripts (mode-only)

docs(readme): add Ask DeepWiki badge to the badge row

docs: fix review findings (submodules path in inheritance, known limits, extensions update removed, counts, stale rows)

fix(installer): hard-link containment (mktemp+rename, link-count refusal), ignore ambient HELIX_ACTION_OUT_ROOT, tests for M1/M2/M4/H1/H3

docs: consistent /constitution status, hedge unverified older-tag claim, current gate behaviour, placeholders marked

test(layout): pin revert mutations to pre-hardening commit, no-op mutants reported BROKEN, sliceable suite, TERM-safe cleanup

fix(installer): contain .claude settings writes, remove args-file test seam from production, gate honours flag only

fix(extensions): bound staging pid (A3), recovery docs, honest known limits for experimental engine

fix(installer): link ownership proofs, root-clarity explicit opt-in, args-file TMPDIR canonical + test seam

docs: /constitution implemented, extensions labelled experimental/dormant, orphans linked, mermaid fix, rounds 9-11 notes

test(install): fixtures independent of real follow-up prompts; self-guard commit allow-empty

fix(extensions): round 11 - remove requires signed state record, signed remove journal, new tests+mutants

fix(extensions): round 10 - remove refuses ids outside the project lock, signed add journal, symlinked shared dirs refused, new tests+mutants

merge: origin/main into installer work

fix(constitution-cmd): args-file path/inode verification (no traversal delete), stdin removed, register/installer symlink defences, root-clarity no false SKIP

Auto-commit 1793455333630