[ancongui]

A checkpoint whose remote publication outcome is uncertain can now be completed through a new, explicitly authorized native request. The original unknown request stays immutable; recovery reuses the retained AI text, checks current authority and source, and confirms the exact branch and draft review with remote revision checks.

This release also keeps later unknown publication intents visible in status, handles excluded generated caches consistently at checkpoint validation, refreshes natural-language status across lifecycle transitions, and waits for short provider contention before dispatch. Provider connection configuration is rechecked after acquiring its lock. A narrowly bounded Darwin child-reaping fix preserves genuine permission failures.

The new v9 source profile is registered with fresh native and PostgreSQL evidence. All four historical profile literals remain intact. The public version, docs, 544 screenshots and packaged Studio assets are regenerated for 0.2.42. See the release notes for the full scope.

Validation:

• Fresh native boundary: 235 supported cases pass; 15 alias diagnostics remain excluded; zero real model calls; owned processes and streams drained.
• Fresh owned PostgreSQL cohort: all 54 ordered cases pass, including the original budget/lease and known-output witnesses; cleanup verified.
• 380 focused host tests; configured Ruff, formatting (840 files), and mypy (300 modules) pass.
• Studio: 627 unit tests, type/lint/format/build pass. Canonical documentation capture: 84 cases pass, 544 actual 0.2.42 PNGs verified; representative desktop/mobile light/dark images reviewed.
• Local wheel/sdist build, exact source/Studio payload verification and distribution checks pass; offline lock check preserves the dependency graph.
• Full configured documentation and Pages targets pass (106 documentation browser cases and 5 Pages cases). The full local Studio browser suite passes all 823 cases (24.5 minutes). Exact-head full CI passes all five primary gates: 6,032 Python tests pass, 55 platform/optional cases skip, and official package/source payload plus installed-wheel smoke checks pass. The normal merge retains the exact reviewed source tree. The standard release workflow also passes all eight jobs. Release v0.2.42, its four assets and downloadable SHA256SUMS are read back; wheel/sdist match the official CI artifacts, the Studio bundle retains all 28 members, and Pages serves the actual 0.2.42 captures. OCI ghcr.io/fireflyframework/firefly-forge:v0.2.42 resolves to sha256:ba3a9a7eb9241f8e948eae28aba850782f5c47939b31e5e66aa0076142cca348 with exact source/revision/version labels. No image layers were downloaded.

Qualification lineage is explicit: the paired native/SQL proof measures the pre-registration source. Registry adoption, public version/captures, test isolation and the separately tested SCM changes preserve all 21 loader inputs, 32 admission dependencies and 311 prompt entries. The proof is not relabeled as a measurement of later whole-source metadata.

This release does not claim complete live CRM acceptance or broad live-provider acceptance. Projects V2, the new response renderer, expanded checkpoint tools and the durable sandbox allocator are separate follow-ups.