ContextualWisdomLab · seonghobae · Aug 24, 2026 · Aug 24, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,37 @@
 ## Unreleased
 
 <!-- BEGIN AUTHORITATIVE CHANGELOG FRAGMENTS -->
+### Changed
+
+#### Release cut 0.9.0
+
+- Project version is bumped to 0.9.0 in `pyproject.toml`, `crates/mlsirm-core`,
+  and `crates/fast-mlsirm-py`. The accumulated `Unreleased` notes now form the
+  `[0.9.0] - 2026-08-24` release section: new governed contracts (cross-engine
+  conformance inventory/provenance/manifest-replay evidence, an external
+  validation and transportability profile, a governed structural-model
+  pair-decision gate, buyer-facing item-bank lifecycle reports), a new
+  Rust-owned crossed/weighted multiple-membership person-effects estimator
+  (Fox & Glas, 2001; Browne, Goldstein, & Rasbash, 2001) with CPU-threaded and
+  optional GPU kernels, reproducible release-tag-bound PyPI sdist/wheel
+  publishing, restriction of production backend selection to Rust-owned
+  paths (NumPy parity moved behind an explicit `fit_reference` API), a Rust
+  1.97.1 toolchain pin across verification, and a broad continuation of the
+  hostile-callback/conversion-protocol hardening sweep across dozens of public
+  entry points (CAT, ATA, DIF, equating, scaling, reliability, multilevel,
+  response-time, fit-statistics, inference, linking, LLM-judge orchestration,
+  parallel-analysis, and rotation/loader concurrency, among others).
+- This cut also removes the stale, never-rendered `release-0.8.0-cut.md`
+  fragment left over from the abandoned 0.8.0 release attempt (that version
+  was never actually tagged or published); its already-recorded
+  `[0.8.0] - 2026-08-17` section in `CHANGELOG.md` is left untouched as
+  history, and this release supersedes it directly.
+- Released authoritative fragments are removed from `docs/changelog.d`; the
+  directory again holds only genuinely unreleased notes.
+<!-- END AUTHORITATIVE CHANGELOG FRAGMENTS -->
+## [0.9.0] - 2026-08-24
+
+
 ### Added
 
 #### Cross-engine conformance inventory contract
@@ -110,28 +141,6 @@
 - Withheld checkout credentials from every Statistical Studies job so
   repository-controlled `cargo test` cannot reuse the Actions token.
 
-#### Release cut 0.8.0
-
-- Project version is bumped to 0.8.0 in `pyproject.toml`, `crates/mlsirm-core`,
-  and `crates/fast-mlsirm-py`. The accumulated `Unreleased` notes now form the
-  `[0.8.0] - 2026-08-17` release section: governed contract additions
-  (multilevel/multiple-membership/longitudinal design, structural
-  model-relation and leakage-safe model-validation units, post-pilot
-  item-bank lifecycle, RAG scoring/perturbation-anchor/facets-calibration
-  adapters, enterprise issue-intelligence observation/calibration/reporting
-  contracts, essay facets/score/validation HTML reports, paired rating-range
-  and essay-facets synthetic recovery evidence), a broad Rust-ownership
-  hardening sweep across dozens of public entry points (CAT, ATA, DIF,
-  equating, scaling, reliability, multilevel, response-time, fit-statistics,
-  inference, linking, LLM-judge orchestration, parallel-analysis, plausible
-  values, Rasch-CML, model-comparison, and rotation/loader concurrency) that
-  reject hostile Python callback/conversion-protocol inputs before native
-  dispatch, and accessibility/documentation polish (exact-value tooltips,
-  tabular numerals, print styles, row headers, architecture baseline,
-  Python 3.14 CI).
-- Released authoritative fragments are removed from `docs/changelog.d`; the
-  directory again holds only genuinely unreleased notes.
-
 #### Pin Rust 1.97.1 across verification
 
 - Pin local Rust builds, Python/Rust package verification, ordinary Rust tests, GPU smoke, packaging, and scheduled statistical studies to exact Rust 1.97.1 instead of a floating stable channel.
@@ -713,7 +722,7 @@
 - Reject caller-defined string and numeric subclasses at `ValidationPolicy` construction before `strip`, numeric conversion, or comparison callbacks can execute.
 - Normalize only exact built-in and package-trusted NumPy real scalar identities for scoring-policy thresholds while preserving the existing closed `0..1` domains and Rust-owned pass/fail arithmetic.
 - Require an exact built-in integer for `min_subgroup_n` before range comparison and preserve the existing `rust_kwargs()` payload contract.
-<!-- END AUTHORITATIVE CHANGELOG FRAGMENTS -->
+
 ## [0.8.0] - 2026-08-17
 
 

diff --git a/Cargo.lock b/Cargo.lock
diff --git a/SECURITY.md b/SECURITY.md
@@ -8,8 +8,8 @@ notice explicitly says otherwise.
 
 | Version | Supported |
 | --- | --- |
-| 0.8.x | Yes |
-| < 0.8 | No |
+| 0.9.x | Yes |
+| < 0.9 | No |
 
 ## Reporting a Vulnerability
 

diff --git a/SUPPORT.md b/SUPPORT.md
@@ -2,7 +2,7 @@
 
 ## Current Pre-1.0 Support Scope
 
-`fast-mlsirm` 0.8.x is the current supported pre-1.0 minor line. Support applies
+`fast-mlsirm` 0.9.x is the current supported pre-1.0 minor line. Support applies
 to behavior that is part of a released artifact and documented public API or CLI
 contract. An active pull request, research plan, experimental internal helper,
 or roadmap item is not supported merely because it exists in the repository.

diff --git a/crates/fast-mlsirm-py/Cargo.lock b/crates/fast-mlsirm-py/Cargo.lock
diff --git a/crates/fast-mlsirm-py/Cargo.toml b/crates/fast-mlsirm-py/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "fast-mlsirm-py"
-version = "0.8.0"
+version = "0.9.0"
 edition = "2021"
 license = "MIT"
 description = "PyO3 bindings for the fast-mlsirm Rust core."

diff --git a/crates/mlsirm-core/Cargo.toml b/crates/mlsirm-core/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "mlsirm-core"
-version = "0.8.0"
+version = "0.9.0"
 edition = "2021"
 license = "MIT"
 description = "Core likelihood and gradient routines for fast-mlsirm."

diff --git a/docs/changelog.d/1015-bounded-subprocess-integrity.md b/docs/changelog.d/1015-bounded-subprocess-integrity.md
diff --git a/docs/changelog.d/1019-judge-runtime-assertion-safety.md b/docs/changelog.d/1019-judge-runtime-assertion-safety.md
diff --git a/docs/changelog.d/1030-item-bank-transition-replay-callback-safety.md b/docs/changelog.d/1030-item-bank-transition-replay-callback-safety.md
diff --git a/docs/changelog.d/1034-classification-cutscore-preflight.md b/docs/changelog.d/1034-classification-cutscore-preflight.md
diff --git a/docs/changelog.d/1040-enterprise-request-record-callback-safety.md b/docs/changelog.d/1040-enterprise-request-record-callback-safety.md
diff --git a/docs/changelog.d/1042-enterprise-observation-callback-safety.md b/docs/changelog.d/1042-enterprise-observation-callback-safety.md
diff --git a/docs/changelog.d/1044-enterprise-explicit-value-integer-safety.md b/docs/changelog.d/1044-enterprise-explicit-value-integer-safety.md
diff --git a/docs/changelog.d/1045-scoring-authorization-record-admission.md b/docs/changelog.d/1045-scoring-authorization-record-admission.md
diff --git a/docs/changelog.d/1049-ata-content-string-callback-safety.md b/docs/changelog.d/1049-ata-content-string-callback-safety.md
diff --git a/docs/changelog.d/1051-assessment-aggregate-record-admission.md b/docs/changelog.d/1051-assessment-aggregate-record-admission.md
diff --git a/docs/changelog.d/1053-bifactor-control-boundary.md b/docs/changelog.d/1053-bifactor-control-boundary.md
diff --git a/docs/changelog.d/1057-rubric-generation-text-callback-safety.md b/docs/changelog.d/1057-rubric-generation-text-callback-safety.md
diff --git a/docs/changelog.d/1059-scoring-shared-enum-callback-safety.md b/docs/changelog.d/1059-scoring-shared-enum-callback-safety.md
diff --git a/docs/changelog.d/1063-model-spec-record-admission.md b/docs/changelog.d/1063-model-spec-record-admission.md
diff --git a/docs/changelog.d/1071-mokken-skew-recovery-contract.md b/docs/changelog.d/1071-mokken-skew-recovery-contract.md
diff --git a/docs/changelog.d/1075-bounded-json-control-callback-safety.md b/docs/changelog.d/1075-bounded-json-control-callback-safety.md
diff --git a/docs/changelog.d/1077-cross-engine-conformance-inventory.md b/docs/changelog.d/1077-cross-engine-conformance-inventory.md
diff --git a/docs/changelog.d/1077-cross-engine-conformance-provenance.md b/docs/changelog.d/1077-cross-engine-conformance-provenance.md
diff --git a/docs/changelog.d/1078-external-validation-profile.md b/docs/changelog.d/1078-external-validation-profile.md
diff --git a/docs/changelog.d/1083-factor-retention-callback-safety.md b/docs/changelog.d/1083-factor-retention-callback-safety.md
diff --git a/docs/changelog.d/1087-multilevel-text-callback-safety.md b/docs/changelog.d/1087-multilevel-text-callback-safety.md
diff --git a/docs/changelog.d/1090-pytest-repository-path.md b/docs/changelog.d/1090-pytest-repository-path.md
diff --git a/docs/changelog.d/1092-conformance-execution-provenance.md b/docs/changelog.d/1092-conformance-execution-provenance.md
diff --git a/docs/changelog.d/1094-conformance-runtime-provenance.md b/docs/changelog.d/1094-conformance-runtime-provenance.md
diff --git a/docs/changelog.d/1096-conformance-manifest-replay.md b/docs/changelog.d/1096-conformance-manifest-replay.md
diff --git a/docs/changelog.d/1098-release-source-identity.md b/docs/changelog.d/1098-release-source-identity.md