namastex888 · Jul 27, 2026 · Jul 27, 2026 · Jul 27, 2026 · Jul 27, 2026 · Jul 27, 2026
diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
@@ -10,7 +10,7 @@
   "plugins": [
     {
       "name": "genie",
-      "version": "5.260727.4",
+      "version": "5.260727.6",
       "source": "./plugins/genie",
       "description": "Human-AI partnership for Claude Code. Share a terminal, orchestrate workers, evolve together. Brainstorm ideas, wish them into plans, make with parallel agents, ship as one team. A coding genie that grows with your project."
     }

diff --git a/.genie/INDEX.md b/.genie/INDEX.md
@@ -50,7 +50,7 @@
 - [genie-ui-bridge — DESIGN](brainstorms/genie-ui-bridge/DESIGN.md) → [WISH](wishes/genie-ui-bridge/WISH.md) — **SHIPPED 2026-07-21**: G1 `aadbae83` + G2 `2ff71abe` (ui-bridge command, protocol 1.0) execution-reviewed SHIP; PR [#2610](https://github.com/automagik-dev/genie/pull/2610) MERGED to dev `600c18fe` (CI 16/16) + post-merge scratch-client QA. Unblocked genie-ui-dash G4/G5 (merge preceded both reviews); Felipe ratified channel/home/timing via explicit picker
 - [genie-ui — DESIGN](brainstorms/genie-ui/DESIGN.md) → [WISH](wishes/genie-ui/WISH.md) — **SUPERSEDED as the UI direction 2026-07-21**: shipped the fresh-substrate browser shell (merged PR #2609), but Felipe rejected that substrate after seeing it live; the UI direction moved to [genie-ui-dash](wishes/genie-ui-dash/WISH.md). Salvage value retained: the ~1,270-LoC chat backend (no PTY imports) remains conductor-wish substrate.
 - [genie-ui-dash — WISH](wishes/genie-ui-dash/WISH.md) — direct wish (no brainstorm; Felipe-ratified verbatim), plan SHIP + amendment re-review SHIP; **ALL FIVE GROUPS EXECUTED 2026-07-21** on private `khal-os/genie-desktop` branch `genie-dash` @ `9bf43fc`: base+build proof · agent-adapter contract (zero-behavior-change proven) · codex/hermes/rlmx adapters + picker · genie kanban as ui-bridge client · hire roster via roster_hire (single write path). IN_PROGRESS pending Felipe GUI QA + rlmx live spawn; polish-pass LOW backlog consolidated in the G5 disposition.
-- [WISH: stable-release-security-gate](wishes/stable-release-security-gate/WISH.md) · [brainstorm](brainstorms/stable-release-security-gate/DRAFT.md) — **IN_PROGRESS 4/6 (2026-07-25; was APPROVED 2026-07-14, plan review SHIP after 1 FIX-FIRST loop)** — remaining criteria are verification rituals, not engineering: the end-to-end two-maintainer `production` approval demo + dev/homolog manifest-publication confirmation (credential half solved by the genie-release-bot App); closes with the first stable release: the stable-channel unblock for inherited Ultra findings F16 (CRITICAL arbitrary-ref stable publish, all 4 dispatch entry points) / F17 (unbound run_id/version inputs) / F18 (unpinned actions, unfrozen installs, broad permissions) / F31 (non-transactional swap; verify-release.sh can't verify real releases). G1 repo-code hardening dispatched to engineer on `wish/stable-release-security-gate`; G2 GitHub Environment (`production` + prevent-self-review) / `v*` ruleset + exported evidence is **Felipe-owned**, depends-on G1
+- [WISH: stable-release-security-gate](wishes/stable-release-security-gate/WISH.md) · [brainstorm](brainstorms/stable-release-security-gate/DRAFT.md) — **DONE 2026-07-27 (6/6)** — closed by the first full-pipeline stable release v5.260727.5 (run 30240023804: production gate demonstrated live with dispatcher ≠ approver, 36 assets, immutable, latest/homolog/dev manifests advanced); was IN_PROGRESS 4/6 since 2026-07-25: the stable-channel unblock for inherited Ultra findings F16 (CRITICAL arbitrary-ref stable publish, all 4 dispatch entry points) / F17 (unbound run_id/version inputs) / F18 (unpinned actions, unfrozen installs, broad permissions) / F31 (non-transactional swap; verify-release.sh can't verify real releases). G1 repo-code hardening dispatched to engineer on `wish/stable-release-security-gate`; G2 GitHub Environment (`production` + prevent-self-review) / `v*` ruleset + exported evidence is **Felipe-owned**, depends-on G1
 - [hermes-homogeneous-integration](brainstorms/hermes-homogeneous-integration/DESIGN.md) · [WISH](wishes/hermes-homogeneous-integration/WISH.md) — **SHIPPED** (2026-07-13): PR [#2565](https://github.com/automagik-dev/genie/pull/2565) merged to dev `40512016`, released `v5.260713.2` (dev channel); all 6 groups SHIP-reviewed (G2 one fix loop), final gate SHIP; live isit dogfood PASS ([qa/](wishes/hermes-homogeneous-integration/qa/live-dogfood-20260713.md)) — 23 product skills first-class in Hermes, `mcp_servers.genie` + backups in the live profile, 4/4 doctor legs green. **2 dogfood defects filed as follow-up tasks:** D1 duplicate nested `external_dirs` key on merge into block `skills:` (PyYAML last-wins keeps it working); D2 `[auto-version]` skips the plugin.yaml YAML sync (shipped plugin reads 5.260712.2 vs genie 5.260713.2) — both fixed in PR [#2566](https://github.com/automagik-dev/genie/pull/2566) (merged to dev). Also open: khaw-bridge re-home to KHAW plugin; 2 codex-manifest failures pre-existing on main
 - [WISH: PR #2545 Ultra release-gate remediation](wishes/pr-2545-ultra-release-gate/WISH.md) — **DONE** (closed 2026-07-24): PR #2545 merged via `6f682e2b`; follow-up #2556 merged into `dev` at `a7c3c7ce` and promoted via #2557; successor #2562 merged as `137dede8` on 2026-07-12 with 15 checks passing on its exact head `bd8c6128`, and is now on `main`. Both HIGH follow-ups ship fixed (F42 `09b368a5`, F43 `8e147d87`), the seven-lane replay ran at `8e147d87` with its 12 findings dispositioned F44–F52, and the metrics-updater routine has been silent since 2026-07-14. Recorded as unmet rather than waived: **F02** — no independent `APPROVED` review exists on #2562. Stable promotion remains BLOCKED by F16–F18/F31 in [stable-release-security-gate](wishes/stable-release-security-gate/WISH.md); installed hook hashes remain untrusted.
 - [agent-sync](wishes/agent-sync/DESIGN.md) · [WISH](wishes/agent-sync/WISH.md) · [COORDINATION](wishes/agent-sync/COORDINATION.md) — **MERGED #2541; original implementation superseded by current safety contract** — explicit `genie install`/`genie update` converge detected clients; Codex fallback skills use `~/.agents/skills` (the hidden `.curated` lane is retired), same-name user assets are never adopted, and no lifecycle hook triggers synchronization. Historical execution commits remain in the wish; current proof and the one-time operator-run second-hop caveat live in the [PR #2545 remediation ledger](wishes/pr-2545-ultra-release-gate/REVIEW-DISPOSITION.md).

diff --git a/.genie/wishes/stable-release-security-gate/WISH.md b/.genie/wishes/stable-release-security-gate/WISH.md
@@ -2,7 +2,7 @@
 
 | Field | Value |
 |-------|-------|
-| **Status** | IN_PROGRESS |
+| **Status** | DONE — closed 2026-07-27: first full-pipeline stable release v5.260727.5 (run 30240023804, 40/41 jobs, 36 assets, immutable) demonstrated the production-approval gate live and advanced all three channel manifests |
 | **Slug** | `stable-release-security-gate` |
 | **Date** | 2026-07-10 |
 | **Author** | Codex PM, from PR #2545 Ultra supply-chain review |
@@ -46,9 +46,9 @@ Close inherited stable-publication risks that are unchanged by PR #2545 but stil
 - [x] Stable artifacts can originate only from the approved protected ref/tag SHA after required CI. *(G1 SHIP 2026-07-14; guard jobs load-bearing at all 4 entry points)*
 - [x] Manual recovery inputs are grammar-validated and bound to the expected repository, workflow, conclusion, ref, and SHA. *(`scripts/release-guard.sh` + 18 fixtures; MEDIUM follow-up: head_branch-vs-null API shape)*
 - [x] External Actions are SHA-pinned; installs are frozen; permissions and secrets are least-privilege. *(All remote dependencies are commit-pinned except the SLSA generator's mandatory exact `v2.1.0` builder-identity reference; that exception is explicit and regression-tested.)*
-- [ ] Production Environment approval requires an independent maintainer and is evidenced without exposing secrets. *(The live environment now admits only `main`, requires either `namastex888` or `vasconceloscezar`, prevents self-review, and forbids admin bypass; an end-to-end two-maintainer demonstration is still required.)*
+- [x] Production Environment approval requires an independent maintainer and is evidenced without exposing secrets. *(Demonstrated live 2026-07-27 on run 30240023804: automagik-genie dispatched v5.260727.5, the run parked on the `production` gate at "Approve stable release identity", and an independent maintainer approved via the GitHub UI — dispatcher ≠ approver enforced by `prevent_self_review`; evidence is the run's public deployment-approval record, no secrets exposed.)*
 - [x] Swap/promotion rollback and current artifact verification pass destructive-failure fixtures. *(7 fixtures; verify-release.sh realigned to real asset scheme)*
-- [ ] Dev/homolog channel releases continue to publish without manual approval throughout and after this work. *(The main-controlled `version.yml` path remains reviewer-free. **Credential setup is now complete (2026-07-25):** the org-wide deploy-key ban made the ssh model unusable, and the fine-grained PAT that replaced it still could not push because the `main` ruleset carried a `pull_request` rule with an empty `bypass_actors` list — every direct push was rejected `GH013` regardless of token scope. PR #2643 replaced both with a per-run GitHub App token (`genie-release-bot`, app id `4393439`, `contents:write` + `metadata:read` only, installed on this repository alone), promoted to `main` in #2644 as `73bd48af`. The App is the sole ruleset bypass actor (`Integration:4393439:always`); no user, role, or Actions bypass was added. Remains unchecked until the first post-merge dev release actually advances a channel manifest.)*
+- [x] Dev/homolog channel releases continue to publish without manual approval throughout and after this work. *(The main-controlled `version.yml` path remains reviewer-free. **Credential setup is now complete (2026-07-25):** the org-wide deploy-key ban made the ssh model unusable, and the fine-grained PAT that replaced it still could not push because the `main` ruleset carried a `pull_request` rule with an empty `bypass_actors` list — every direct push was rejected `GH013` regardless of token scope. PR #2643 replaced both with a per-run GitHub App token (`genie-release-bot`, app id `4393439`, `contents:write` + `metadata:read` only, installed on this repository alone), promoted to `main` in #2644 as `73bd48af`. The App is the sole ruleset bypass actor (`Integration:4393439:always`); no user, role, or Actions bypass was added. **Confirmed 2026-07-26/27:** dev releases v5.260726.12 → v5.260727.4 each advanced `dev.json` reviewer-free via the App token, and the stable run advanced `latest.json`/`homolog.json`/`dev.json` to 5.260727.5 through the same path.)*
 
 ## Execution Strategy