fix: normalize rho release metadata

Makefile

@@ -253,6 +253,7 @@ build-all: ## Build for all platforms (darwin/linux/windows × amd64/arm64)
 	GOOS=linux   GOARCH=amd64 CGO_ENABLED=0 go build -trimpath -ldflags="$(LDFLAGS)" -o bin/$(NAME)-linux-amd64 $(MAIN_PKG)
 	GOOS=linux   GOARCH=arm64 CGO_ENABLED=0 go build -trimpath -ldflags="$(LDFLAGS)" -o bin/$(NAME)-linux-arm64 $(MAIN_PKG)
 	GOOS=windows GOARCH=amd64 CGO_ENABLED=0 go build -trimpath -ldflags="$(LDFLAGS)" -o bin/$(NAME)-windows-amd64.exe $(MAIN_PKG)
+	GOOS=windows GOARCH=arm64 CGO_ENABLED=0 go build -trimpath -ldflags="$(LDFLAGS)" -o bin/$(NAME)-windows-arm64.exe $(MAIN_PKG)
 
 build-static: ## Build fully static binaries for Linux (musl-compatible)
 	GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build -trimpath -ldflags="$(LDFLAGS)" -o bin/$(NAME)-linux-amd64-static $(MAIN_PKG)

docs/ECOSYSTEM-WIRING.md

@@ -1,13 +1,9 @@
 # GrayCode ecosystem wiring
 
-> NOTE (2026-09-04): the `eagle` repository has been removed; its contracts
-> were vendored into rho's `internal/contracts` and `ecosystem.yaml`
-> no longer lists it. Diagrams below predate the removal.
-
-This document is the implementation contract for the 14 repositories in the
-GrayCodeAI ecosystem. `ecosystem.yaml` is the canonical machine-readable
-inventory; generated workspaces, boundary checks, release parity, and Owl's
-repository catalog derive from it.
+> **STALE (2026-09-18):** Diagrams below predate `eagle` removal (2026-09-04) and list 14 repos / 6 engines. Canonical inventory is `ecosystem.yaml` (now 6 repos: `rho`, `flux`, `graycode-skills`, `graycode-platform`, `rover`, `across`). Use that for workspace/boundary checks. See `PLAN.md` at eco root for remediation.
+> NOTE (2026-09-04): `eagle` contracts vendored into `rho/internal/contracts`.
+
+This document is the historical implementation contract. `ecosystem.yaml` is the canonical machine-readable inventory.
 
 ## Current state before this change
 

docs/README.md

@@ -0,0 +1,10 @@
+# Rho Documentation
+
+Index for `rho/docs/`. `ecosystem.yaml` is the canonical repo inventory; `ECOSYSTEM-WIRING.md` is historical.
+
+- **Architecture** `architecture/README.md` + `architecture.md`
+- **User Guide** `user-guide/` (skills, slash commands, permissions)
+- **Ecosystem** `ECOSYSTEM-WIRING.md` (pre-2026-09-04), `ECOSYSTEM-ROADMAP.md`, `ecosystem-message-flow.md`, `ECOSYSTEM-CONFIG.md`, `platform-capabilities.json` (legacy)
+- **Security** `SECURITY-DEVELOPER.md`, `DAEMON-PORT-THREAT-MODEL.md`
+- **Ops** `BENCHMARKS.md`, `OTEL-CONVENTIONS.md`, `versioning.md`
+- **Plans** `plans/` + `ecosystem-remediation-plan.md`

ecosystem.yaml

@@ -41,3 +41,19 @@ repositories:
     kind: platform
     language: typescript
     workspace: false
+
+  - directory: rover
+    github_repo: rover
+    product_name: Rover
+    kind: tooling
+    language: go
+    module: github.com/GrayCodeAI/rover
+    workspace: false
+
+  - directory: across
+    github_repo: across
+    product_name: Across
+    kind: tooling
+    language: go
+    module: github.com/graycodeai/across
+    workspace: false

install.sh

@@ -13,6 +13,18 @@ fi
 REPO="GrayCodeAI/rho"
 BINARY="rho"
 
+# Version pin: --version <ver> or RHO_VERSION env (e.g. 0.1.0 or v0.1.0)
+VERSION_PIN="${RHO_VERSION:-}"
+if [ "$1" = "--version" ]; then
+  VERSION_PIN="$2"
+  shift 2
+elif [ "$3" = "--version" ]; then
+  # handle --prefix <dir> --version <ver> order
+  VERSION_PIN="$4"
+  set -- "$1" "$2"
+fi
+VERSION_PIN=$(printf '%s' "$VERSION_PIN" | sed 's/^v//')
+
 OS=$(uname -s | tr '[:upper:]' '[:lower:]')
 ARCH=$(uname -m)
 case "$ARCH" in
@@ -31,10 +43,14 @@ case "$OS" in
     ;;
 esac
 
-LATEST=$(curl -fsSL --proto '=https' --tlsv1.2 "https://api.github.com/repos/$REPO/releases/latest" | grep '"tag_name"' | sed -E 's/.*"v([^"]+)".*/\1/')
-if [ -z "$LATEST" ]; then
-  echo "Error: could not determine latest version"
-  exit 1
+if [ -n "$VERSION_PIN" ]; then
+  LATEST="$VERSION_PIN"
+else
+  LATEST=$(curl -fsSL --proto '=https' --tlsv1.2 "https://api.github.com/repos/$REPO/releases/latest" | grep '"tag_name"' | sed -E 's/.*"v([^"]+)".*/\1/')
+  if [ -z "$LATEST" ]; then
+    echo "Error: could not determine latest version"
+    exit 1
+  fi
 fi
 
 ARCHIVE_NAME="${BINARY}_${LATEST}_${OS}_${ARCH}.${ARCHIVE_EXT}"