# v0.8.18 Release Notes

## Immutable unpublished history

`0.8.18` has an immutable `v0.8.18` tag but its one Release workflow failed in
the repository test stage before GitHub Release creation or npm publication.
It is historical evidence only: do not retag, rerun, or publish it. The root
package, lockfile, private shared-skills package, and
`consumer-authority-v0818-acceptance.json` remain a strict historical record
and cannot authorize a later candidate.

Initialization writes the exact installed npm plugin specifier
`persona-harness@0.8.18` into `.opencode/opencode.json`. Generated project
state no longer embeds an installation-specific absolute `dist/index.js` path,
so two independently installed consumers can produce the same tracked source
identity. Existing third-party OpenCode plugin entries are retained. A legacy
absolute Persona Harness plugin entry is removed only after the intact owned
init manifest verifies that its package name and version match; unowned or
unverifiable paths are preserved.

The source-identity and authority verification boundaries remain fail-closed:
OpenCode configuration stays part of the signed source model, and no
verification, enrollment, artifact, Finish, or replay behavior is relaxed.

## Historical boundary

This record retains the portable OpenCode registration boundary. Its release
workflow test exposed a concurrent ancestor-directory metadata churn case in
authority archive intake. That correction is separately prepared as 0.8.19;
fixture and V4 evidence remain separate, explicitly authorized steps.