# v0.8.14 Release Notes

## Current package authority

`0.8.14` is the next package authority after immutable v0.8.13 unpublished
history and the published v0.8.12 release. The root package, lockfile, private
Persona shared-skills package, and
`consumer-authority-v0814-acceptance.json` bind the same version. The v0.8.13
and v0.8.12 records remain strict historical evidence and cannot authorize this candidate.

The authority fetch keeps the explicit verified artifact tuple and publishes
`consumer-authority-fetch.4`, adding only a finite nonreflective `sourceReason`
when a terminal source binding result is returned. Other binding reasons remain unchanged; no receipt, path, digest,
certificate, artifact, credential, or raw diagnostic is retained or exposed.

The observer GitHub CLI version probe allows one explicit 15-second cold-start
ceiling. A real timeout is classified separately from unavailable, unsupported,
and invalid tool outcomes without retaining process output.

## Release boundary

This branch prepares version authority only. Fresh Source and Package gates
must bind the exact candidate and canonical tar before any release action; the
future V4 fixture observation remains a separate hosted residual.