Draft: PlugBrain 0.5.0-dev.1 integration candidate

[litbitrim]

Scope

This Draft PR bridges the local PlugBrain 0.5 source candidate onto public main as 0.5.0-dev.1. The exact review head is 42b5b06d487ac6e07a3a2dc7863fddecd23cc0c1. It includes scoped Planet/checkout intelligence, responsive navigation, durable turn UI, and coordination/fleet work. Follow-up commits fix cross-platform tests, preserve task ownership and evidence containment, bound missing-worktree scans, and finalize supervised task state and lead alerts atomically. Internal historical scripts and review notes are excluded from the public diff. The release signing gate remains in place.

Verification at 42b5b06

• CI on Linux, macOS, and Windows: all three jobs passed.
• Release dry run on Linux, macOS, and Windows: all three build/verification jobs passed. Signing verification and publication were skipped because this is a branch, not a version tag.
• Local Windows npm test: 537 passed, 0 failed, 54 intentionally skipped. npm run test:budget: 6 passed. Core/UI typechecks, standalone build and browser verification, NSIS packaging, and tracked-file secret scan passed.
• Independent review of the bridge and follow-up deltas: no remaining HIGH or MEDIUM findings. The review caught a supervisor ownership race and an alert failure path; both were fixed before the final commit.
• The local Windows installer is unsigned (UNSIGNED_NOT_FOR_PUBLIC_RELEASE) and has not been installed.

Open product and release gates

• M18: the required 30-question GitNexus comparison with precision, recall, and p95 on frozen product revisions is incomplete. A read-only smoke check against the current local index showed only one of the eight draft gold questions with its expected path among the first 25 sources. This is not a parity result.
• An approved trusted Authenticode-signed installer and the live-update preflight, backup, targeted stop, install, smoke, and rollback evidence are still required before replacing the installed 0.3.0.
• The separate Gateway quota governor and Paperclip provider/model routes require integration and qualification before autonomous fleet work.

Keep this PR in Draft. Do not tag or publish this candidate as stable 0.5.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-30T14:03:41.449791Z	42b5b06	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.