[atx-omni]

Summary

• Preserve the unique repair from Fix dependency audits and hardening tests for dependency updates atx-omni/OmniFlow#29: enforce urllib3>=2.8.0,<3 for ordinary installs and validate dependency policy against the reviewed locks.
• Complete the setuptools 84 update from Bump setuptools from 83.0.0 to 84.0.0 atx-omni/OmniFlow#17 consistently across build requirements, hash locks, CI, and setup documentation.
• Preserve the ATX historical architecture guide and its explicit historical-version warning before synchronizing the repositories.

Verification

• 26 focused tests plus 3 subtests passed; Ruff and whitespace checks passed.
• Python 3.11 Linux runtime/release lock resolution and hash-verified downloads passed.
• Offline source and wheel builds with setuptools 84 passed, both distributions passed Twine, and installed-wheel startup plus pip check passed.
• Runtime and release version audits found no known vulnerabilities.
• Hosted CI remains required before merge.

Follow-through

After merging, synchronize these changes into the ATX copy, verify identical source trees, and close the superseded ATX dependency PRs with explicit replacement references.

[atx-omni]

Post-merge verification complete: ATX synchronization merged as atx-omni/OmniFlow#32. Explore main 29f3a44 and ATX main ea5bdc8a43c077457a09ce782b0de6ba0403910f have the identical source tree a7a25a36d6d1c5f46d21ee2c74bb5355b1293038. Both final-main Test, Dependency Scan, SAST, Actions Security, and Secret Scan workflows passed. Test runs: https://github.com/exploreomni/OmniFlow/actions/runs/38847299021 and https://github.com/atx-omni/OmniFlow/actions/runs/38847463120. Superseded ATX PRs #17, #18, #22, #23, #24, #25, #26, #28, and #29 are closed with per-PR replacement explanations; their branches were retained. ATX OmniFlow now has no open PRs. Repository protection policies were not changed.