chore(release): prepare Runtime 0.290.1

[drewstone]

Release

Prepare Runtime0.290.1 through maintained release:prepare.
Consume the patch note from merged1490.
Only seven release/generated files change; no execution source, tests, dependencies, workflow, or permissions.

Retained proof

Runtime1487's exact identity validation passed the actual managed consumer:
all3,766 native files verified, exact Claude assistant output retained, root and child automatically absent.
Independent source and live review are linked in1487 and retained Lab1209.

The0.290.0 publisher failed on one obsolete mock expectation, despite4,681 passing checks.
Merged1490 removes that false-positive deletion row and dead branches while retaining four negative refusal controls.
The failed v0.290.0 tag/run remain unchanged.
This is an immutable forward release.

GTR version-bump, typecheck, package-static, docs-freshness and API-surface-record pass.
No new tests or local suites.
After merge, tag the exact actualmain tip and follow maintained publisher to terminal.

[tangletools]

✅ Auto-approved PR — af770522

Blanket team auto-approval is intentional. The merge gates are CI and codex-p1.
No automated review runs on this PR. This approval rests on the rule above alone.

_{tangletools · auto-approval · reason: blanket_auto_approve · 2026-10-01T12:39:33Z}

[drewstone]

Independent bounded release review passed af77052: seven release/generated files only, correct patch version0.290.1, prior patch note consumed into CHANGELOG, consistent version banners/fixtures. No execution source, dependencies, permissions or workflow changed. v0.290.0 failed publication stays immutable;0.290.1 publication and public-consumer qualification remain separate checks.