Upload 4 files

README.md

@@ -133,7 +133,20 @@ See `CHANGELOG_V194.md` for the Model Pre-scan Decision Card UI pass.
 See `CHANGELOG_V195.md` for the Runtime CSS Cleanup with Legacy Safety Net pass.
 
 
-Current release: Agentic Space Factory v198.26.125.
+Current release: Agentic Space Factory v198.26.127.
+
+
+## v198.26.127 — Autonomous Release Orchestration
+
+Pass 127 makes the worker validate the *latest release candidate* instead of merely trusting that any live Gradio endpoint belongs to the latest upload. The build worker now freezes an auditable release candidate, stamps the runtime payload with `ASF_RELEASE.json`, injects release identity into `/health`, waits for the Hub runtime to be non-busy before validation, blocks `/generate` until `/health` reports the expected release identity, and records release/build/runtime/smoke evidence per repair attempt. This keeps ASF autonomous while preventing stale-runtime smoke tests from being promoted to `full_inference_success`.
+
+## v198.26.126 — Release Integrity Barrier
+
+- Blocks unsafe local project installs such as `.`, `./`, `-e .` and `file:.` from publishable `requirements.txt` files.
+- Treats model-card `pip install -e .` as a local-development instruction, not as a dependency line to add to generated Space payloads.
+- Prevents model-card convergence from reintroducing a requirement that repair/log evidence proved build-breaking.
+- Adds release-candidate hashes to the runtime upload manifest and upload epoch.
+- Adds a post-upload release integrity barrier before trusting live HTTP/Gradio endpoints, so `full_inference_success` requires a settled latest upload.
 
 ## v198.26.125 — Multi-attempt Agent Recovery Tabs