[itswl]

The quickstart's six image lines move from 0.10.1 to 0.10.2, pinned by digest as docs/releasing.md says. The digests are the OCI index digests GHCR serves for the 0.10.2 tags, read anonymously after the release run for the tag finished green on every job; :latest carries the same four.

Nothing in 0.10.2 is something this file depends on, so its comment keeps saying it needs 0.8.0 or newer and points at the newest. The one compose change since 0.10.1 outside the pins is the work deployment's watcher retention window, which this file has no counterpart for: its investigator keeps the code's default.

Run the way a stranger does before this was opened, from an empty directory holding only the compose file and scripts/demo.sh: pulled by digest, the three boards answered 200 within seconds, and the demo ran all nine steps (routes ai 2, reuse 1, recovery 1; the card press executed both observations; the recovery verified the work). demo exit=0; down -v removed the containers, the volumes and the network.

Read back from the running images: the investigator carries claude-agent-sdk 0.2.179 with its bundled CLI 2.1.319, its guards register on_failure="block", and its closed tool list has fourteen entries; /v1/posture reads no-credentials with an empty writable_inputs. The pipe's purge deletes from card_actions and returns a presses count; the judge's purge logs its count.

Rollback: re-pin these lines to the 0.10.1 digests; nothing persisted changes shape.

Gate: STACK GATE GREEN locally; CI read back before merging.