momoyeyu a574f00278 fix: enforce pinned-runtime contract in DSH release pipeline ...

- release-source.mjs rejects non-exact-SemVer dshVersion and any
  committed adapter scripts before packing or install
- distribution-acceptance.mjs verifies installed package name and
  version against release.dshVersion before executing the entry
- pack.mjs runs npm pack with --ignore-scripts
- contract and staging tests cover prerelease acceptance, hostile
  version rejection, and lifecycle-script rejection

2026-09-22 17:39:49 +08:00

..

deepseek-harness

fix: enforce pinned-runtime contract in DSH release pipeline

2026-09-22 17:39:49 +08:00

hermes-agent

Use the Windows Python launcher for Hermes contract tests

2026-09-17 01:41:36 +08:00