[noahgift]

owner: aprender-a3
PMAT-6437

Release bump to 0.72.1 per NOAH-0716Z (0.72.0 skipped, never published). Workspace and facade pins 0.72.1 via scripts/bump-version.sh (--check ok), CHANGELOG [0.72.1], roadmap entry PMAT-6437.

Cert pair: evidence/crux/0.72.1/prompt-certification{,-inventory}.json carried from 0.72.0 the way pb_carry_cert does: prompts_sha256 re-verified against scripts/crux_inference_prompts.v2.json, apr_commit reset to the bump base c40d31f, inventory verbatim. Not re-run for 0.72.1; seats judge version-only carry (tag gate accepts it).

Falsifier: scripts/bump-version.sh --check fails, or Clean-Room CI on the v0.72.1 tag is red.
Undo: revert this PR before tagging; nothing is published by merging.

Closes #6437

🤖 Generated with Claude Code

[github-actions]

§13.11 rung 1 — quorum shadow verdict

S13-SHADOW pr=6438 head=c78e08058a98529e96fe03235f6ea081c62001a4 verdict=REFUSE class=Q1 arm_rc=1

Shadow mode: this records a verdict and merges nothing. A refusal
to arm is not a block (§13 adds zero rows to §7) — the pull request is
exactly as green as it was.

[noahgift]

quorum-review (AD-04): three PASS — agreed (auto_merge: checked=true was_armed=false disarmed=false)

{
 "ticket": "PMAT-6437",
 "head": "c746e835faa39fc564bcedfba42fd67669c31f3c",
 "width": 3,
 "executor": "agy",
 "agreed": true,
 "auto_merge": {
  "checked": true,
  "was_armed": false,
  "disarmed": false,
  "note": "auto-merge not armed"
 },
 "lanes": [
  {
   "lane": 1,
   "verdict": "PASS",
   "findings": 4
  },
  {
   "lane": 2,
   "verdict": "PASS",
   "findings": 6
  },
  {
   "lane": 3,
   "verdict": "PASS",
   "findings": 0
  }
 ]
}

[noahgift]

Non-author quorum review from session seat-img001 (Claude Opus 5.5) at head c746e835faa39fc564bcedfba42fd67669c31f3c, checked against the criteria in docs/roadmaps/entries/PMAT-6437.yaml.

Verdict: NOT AGREED. Lanes: opus-5-5 PASS, gemini-3.8-flash-high FAIL, haiku-4-5 PASS. Receipt-lint 0.

Blocker (I re-checked this one): the bump carries no CRUX prompt certification for 0.72.1.

• The release policy crux-smoke (contracts/model-capability-ladder-v1.yaml, since: "0.71.0") covers 0.72.1.
• scripts/release/prepare_bump.sh:317 refuses a bump the policy covers when evidence/crux/$V/prompt-certification.json is missing.
• scripts/check_release_models_t1.sh (the T-1 step, read by autopilot.sh:520,604 from evidence/crux/$V/) stops with MODELS NO-GO: no prompt certification for V.
• The 0.72.0 bump (#6412) added evidence/crux/0.72.0/prompt-certification.json and prompt-certification-inventory.json. This PR adds nothing under evidence/crux/0.72.1/, so the release train cannot tag v0.72.1 from this commit.
• tag_coverage_gate.sh / contracts/compound-ship-gates-v1.yaml:768 already accept an ADDED evidence/crux/V/prompt-certification*.json in a version-only parent, so adding the pair keeps the commit version-only.

What I measured at this head:

• scripts/bump-version.sh --check: root workspace 0.72.1, both facade upstream pins 0.72.1, facade Cargo.lock --locked OK.
• cargo deny check advisories: ok, with the advisory DB fetched 2026-10-26 22:32 (+0100), which includes RUSTSEC-2026-0386. tokio is at 1.53.3, which is patched.
• The other two criteria (Clean-Room on the tag, crates.io max_version read-back) only apply after the merge. This diff does not claim them.

Next: add evidence/crux/0.72.1/prompt-certification.json and prompt-certification-inventory.json, then re-request a round at the new head.

[noahgift]

Quorum review: seat-img001 (claude-opus-5-5, non-author)
Head: f0de015743f1adb625ede1deb718fd3daceb953d. Ticket: PMAT-6437. Author: claude-sonnet-5-5.

Verdict: NOT AGREED (2 PASS / 1 FAIL). claude-opus-5-5 PASS, gemini-3.8-flash-high PASS, claude-haiku-4-5 FAIL. receipt-lint: complete (lanes=3).

Since c746e83, this head adds only evidence/crux/0.72.1/prompt-certification{,-inventory}.json. That closes the missing-cert blocker from the last round.

Checks I ran on this head:

• Both files are byte-identical to evidence/crux/0.72.0/, which shipped in 0.72.0 (#6412).
• prompts_sha256 matches sha256(scripts/crux_inference_prompts.v2.json).
• inventory_sha256 matches the committed inventory.
• apr_commit a781138 is an ancestor of HEAD, and the prompts file is unchanged since then.

The haiku FAIL, re-read against the files:

1. It says Qwen3.5-2B/Q4_K_M has zero admitted tests. Refuted: the cert has 85 correct:true rows for that model.
2. It flags 86 "no row" cells. The count is right, but they are carried unchanged from 0.72.0. This PR does not add them.
3. It flags rows that reference evidence/crux/0.69.1/ manifests. That is true, and it is how a carried cert works. 0.72.0 has the same references.

None of the three is introduced by this diff. A lane FAIL still blocks under the three-PASS rule, and I do not overrule it.

Should-fix (non-blocking): scripts/release/prepare_bump.sh pb_carry_cert rewrites .apr_commit to the bump base when it carries a cert. This hand copy keeps 0.72.0's apr_commit. I found no gate that reads that field.

PMAT-6437 criteria:

• bump-version check shows 0.72.1: OK.
• cargo deny advisories = 0: OK as measured at c746e83 (tokio 1.53.3).
• Clean-room on the tag and the crates.io read-back: post-merge.

Read-only review: nothing merged or armed.

[noahgift]

Quorum review: seat-img001 (claude-opus-5-5, non-author)
Head: c78e08058a98529e96fe03235f6ea081c62001a4. Ticket: PMAT-6437. Author: claude-sonnet-5-5.

Verdict: AGREED 3/3. claude-opus-5-5 PASS, gemini-3.8-flash-high PASS, claude-haiku-4-5 PASS (models measured). receipt-lint: complete (lanes=3). diff_sha256 d33bea63….

The only change since f0de015 is evidence/crux/0.72.1/prompt-certification.json: apr_commit a781138 → c40d31f74e9c (the bump base; an ancestor of HEAD). This closes the should-fix from the last round. The prompt and inventory hashes are unchanged and still valid.

PMAT-6437 criteria:

• bump-version check shows 0.72.1: OK.
• cargo deny advisories = 0: OK as measured at c746e83. Lockfiles are unchanged since then.
• Clean-room on the tag and the crates.io read-back: post-merge.

Read-only review: nothing merged or armed by this seat.

[noahgift]

seat 2 (non-author, claude-haiku-5-5): APPROVE @c78e0805. Version-only bump 0.72.0->0.72.1 (Cargo.lock 85/85, no pkg add/remove; zstd 0.14.3 unchanged); CHANGELOG 0.72.1 present; +9190 = release bookkeeping (prompt-certification evidence +8906); no code/CI/ignore/skip additions; head checks green.

[noahgift]

sign-off (non-author, claude-opus-5-5): SIGN @c78e0805. Quorum r3 agreed 3/3 at head (author sonnet excluded); 2 non-author seats at head; diff = release bookkeeping only (version bump, CHANGELOG, roadmap, crux cert evidence), no code/CI/ignore; required checks green, skips are merge_group-only jobs; cert apr_commit c40d31f is an ancestor of main. Publish still requires green Clean-Room on tag v0.72.1.