[PurpleCHOIms]

Summary

Post-publication records for the two releases shipped this cycle, plus a policy doc correction for a process change the maintainer made today.

Changes

• CHAGELOG.md: move the v2.2.2 entries (sandbox lean build build(sandbox): pin Go tool releases and gate heavy optional layers #1136, launcher fix fix(launcher): keep update-prompt active option legible on any canvas #1129, CLI skill cleanup refactor(skill): make Decepticon a discoverable CLI wrapper #1132, legacy layout retirement chore(oss): retire deprecated Electron shell and organize legacy docs #1133, content audit docs(oss): reconcile current guides with machine scope and runtime contracts #1134, terminal test repair test(web): verify PTY persistence instead of retired connection text #1135) from Unreleased into a dated [2.2.2] section, and add the missing [2.2.1] record (async step-budget fix fix(middleware): implement awrap_model_call in StepBudgetMiddleware — async engagement runs crash on 2.2.0 #1130, edge-less OPPLAN validation fix(workflow): reject OPPLANs that declare no edge into prerequisite stages — dispatch lock on edge-less plans #1131, published from 96b7086) that was never moved at publication. Compare links added.
• RELEASE.md: drop the manual reviewer-approval wording for the pypi-release environment — the required-reviewers rule was retired on 2026-10-28. Tagging is itself the publish authorization; the environment stays for PyPI Trusted Publishing (OIDC environment binding) and its branch policy.

Intent

• Issue / ADR this satisfies: none — post-publication docs record per RELEASE.md §4.5.
• Anti-goal: no runtime code, no image, no version change.

Blast radius

• Tier-auto — docs and changelog only.

End-to-end verification

Release v2.2.2 verified live before this doc change: workflow run 40634508927 completed success; GitHub release published 2026-10-28T05:56:43Z (draft false, 18 assets incl. image-digests.txt and SBOMs); candidate launcher decepticon-linux-amd64 checksums.txt match with --version → Decepticon 2.2.2; PyPI decepticon-core/decepticon/decepticon-sdk all at 2.2.2; ghcr.io/bittersecurity/decepticon-langgraph:latest manifest digest equals :2.2.2 (sha256:dfebfd8b…).

Testing

• Manual verification only (docs change; see above)
• make quality — not run: docs-only diff

Related Issues

None.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	🔄 Running since 2026-10-28T06:10:33.232921Z	2b30fa2	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.