Update EPD to published dev21 native incremental prerelease

.claude-plugin/marketplace.json

@@ -34,8 +34,8 @@
     {
       "name": "cortex-epd",
       "source": "./plugins/cortex-epd",
-      "description": "Demo-only prerelease wrapper for cortex-epd 0.1.0-dev.14.candidate.39933331655.1.2. EPD pre-audit instructions come from that complete candidate. HOLD remains in effect; this is not promotion, product acceptance or certification.",
-      "version": "0.1.1"
+      "description": "EPD evidence review and report interpretation with published incremental prerelease CLI 0.1.0-dev.21.candidate.41755813555.1.2. Stability and professional acceptance remain incomplete; not certification.",
+      "version": "0.1.2"
     }
   ]
 }

README.md

@@ -15,10 +15,10 @@ Prepare an openLCA study, work with product carbon-footprint cases, review EPD e
 | [hiq-editor](plugins/hiq-editor/README.md) | HiQ Editor toolkit: the native CLI release, its canonical UPR workflow skill and evidence-based authoring/review agents. |
 | [jimu-lca](plugins/jimu-lca/README.md) | Inspect JiMULCA product carbon-footprint cases and run authorized inventory, binding and calculation operations with the user's own member credential. |
 | [cortex-lca-expert](plugins/cortex-lca-expert/README.md) | Preview wrapper for cortex-lca-expert 0.1.0-dev.14: build, inspect and calculate openLCA models using the user's installed application and Cortex expert authorization. Wrapper version 0.1.0 is not a stable CLI release. |
-| [cortex-epd](plugins/cortex-epd/README.md) | Demo-only prerelease wrapper for cortex-epd 0.1.0-dev.14.candidate.39933331655.1.2. EPD pre-audit instructions come from that complete candidate. HOLD remains in effect; this is not promotion, product acceptance or certification. |
+| [cortex-epd](plugins/cortex-epd/README.md) | EPD evidence review and report interpretation with published incremental prerelease CLI 0.1.0-dev.21.candidate.41755813555.1.2. Stability and professional acceptance remain incomplete; not certification. |
 <!-- catalog:end -->
 
-For both expert plugins, `0.1.0` in the download path and Cortex supply metadata is the **archive wrapper version**, not a stable CLI version. The executable versions are shown above. EPD's newer development source does not make a newer downloadable release available. This catalog does not supply EPD dev.21.
+openLCA still uses a `0.1.0` supply wrapper around its prerelease CLI. EPD now points directly to native incremental prerelease **0.1.0-dev.21.candidate.41755813555.1.2**, with no wrapper-version substitution. See [EPD release and Host compatibility](docs/EPD_RELEASE.md). Neither expert is a stable release or proof of completed professional acceptance.
 
 ## Install in Claude Code
 
@@ -52,7 +52,7 @@ See [compatibility and verification](docs/COMPATIBILITY.md) for platform coverag
 
 - **Building an LCA study?** Use the prerelease openLCA plugin with your own official openLCA installation and appropriately licensed databases. Dataset lookup does not calculate a model.
 - **Working in JiMULCA?** Use its case workflow and the intended space/case. Local file edits do not change a remote case.
-- **Preparing or reviewing an EPD?** The demo prerelease assists with intake and evidence. A generated report is not certification, and review execution requires explicit delegation and model-cost authorization.
+- **Preparing or reviewing an EPD?** The incremental prerelease assists with intake and evidence. A generated report is not certification, and review execution requires explicit delegation and model-cost authorization.
 - **Authoring data in Editor?** Separate workbook preparation, preflight, import, trial calculation and review submission. Each has different effects; submission may notify reviewers.
 - **Finding internal knowledge?** Nora reads published pages under your organization's access rules and preserves versioned citations.
 

docs/CAPABILITIES.md

@@ -8,7 +8,7 @@ Choose a plugin by the system and task you actually need. Agent roles help organ
 | Editor | Prepare authorized UPR inputs; inspect preflight; import, trial-calculate and read back a process | Import uploads/creates remote resources. Trial calculation writes results. Review submission can notify people and needs specific submission authorization. Workbook preparation is not a successful import. |
 | JiMU | Inspect products/cases; prepare inventory; authorized edits, background binding and calculations | Requires intended product/space/case and controlled member credential. UUID-based local binding has a separately prepared optional bridge; ordinary name-based binding does not justify downloading it. No certification claim. |
 | openLCA prerelease | Prepare a study, operate an authorized native model and explain actual calculations | Requires user's openLCA installation, workspace, data licenses and CLI entitlement. Database import/restore/replacement, entity edits, service start and calculations have real effects. No automatic database preparation. Structural checks are not professional quality acceptance. |
-| EPD demo prerelease | Clarify engagement and material roles; execute a separately authorized demo review; explain actual findings and reports | Demo-only, formal promotion on hold. Requires matching sidecars, separately locked Docling, intended login/entitlement, delegation and model-cost consent. Review creation/copying materials and execution are not read-only checks. Reports are not certificates. |
+| EPD incremental prerelease | Clarify engagement and material roles; execute a separately authorized review; explain actual findings and reports | Incremental prerelease; stability and professional acceptance incomplete. Requires matching sidecars, separately locked Docling, intended login/entitlement, delegation and model-cost consent. Review creation/copying materials and execution are not read-only checks. Reports are not certificates. |
 
 ## Authorization and evidence
 

docs/COMPATIBILITY.md

@@ -8,7 +8,7 @@
 | HiQ Editor | Yes | Yes | Yes | Yes | Yes |
 | JiMU | Yes | No | No | No | No |
 | openLCA modeling — prerelease | Yes | No | No | Yes | Yes |
-| EPD review — demo prerelease | Yes | No | No | Yes | Yes |
+| EPD review — incremental prerelease | Yes | No | No | Yes | Yes |
 
 “Yes” means a pinned archive exists in [the catalog](../marketplace.json), not that every workflow has been accepted on that platform. JiMU has no Windows fallback in this catalog. Preserve all archive sidecars on supported platforms.
 
@@ -28,13 +28,13 @@ Checks distinguish package integrity from professional or business acceptance:
 | Native manifests | `claude plugin validate` checks the generated marketplace and the plugin manifests. It does not execute a model-driven workflow, install CLI dependencies or prove business correctness. Optional listing icons are not supplied. |
 | New expert archive integrity | Both macOS arm64 archives were downloaded and their entire SHA256 digests matched the catalog. Full bundles were extracted for isolated discovery checks. |
 | Actual openLCA CLI | The macOS binary's `version` reports `0.1.0-dev.14`; `--help` exits successfully. No openLCA database/service was opened or modified in these checks. |
-| Actual EPD CLI | The macOS binary's `version -f json` reports `0.1.0-dev.14.candidate.39933331655.1.2`; `--help` exits successfully. No Docling installation, login, model call, review or report generation was performed. |
-| Download availability | Pinned expert archives have accessible CDN entries. Newer EPD `experts/cortex-epd/latest.json` and `install.sh` returned HTTP 403; they are not advertised as installation paths. |
+| Actual EPD CLI | The macOS binary's `version -f json` reports `0.1.0-dev.21.candidate.41755813555.1.2` / Bun1.4.4. The production provisioner was exercised with verified public archive bytes replayed locally; complete operation skill and references materialized, pinned SDK discovery and actual strict macOS codesign passed. No Docling installation, login, model call, review or report generation was performed. |
+| Download availability | Pinned expert archives have accessible CDN entries. The new EPD native release and installation instructions are publicly available; exact URLs/digests are pinned, not inferred from an old wrapper. |
 
 The macOS discovery checks used an isolated HOME and no business credentials. Windows/Linux archive entries do not imply a new Windows/Linux execution test in this repository update. The four existing CLI pins are unchanged; this update does not re-accept their business workflows.
 
 ## Prerelease limits
 
-openLCA and EPD archives both use a `0.1.0` supply wrapper. That value is not their executable version and does not turn either into a stable release. EPD's candidate is demo-only, `promotable:false` in its release evidence, and remains on hold for formal promotion. A newer source revision or development version is not proof that a public archive was released.
+openLCA uses a `0.1.0` supply wrapper around its prerelease executable. EPD now directly uses native **0.1.0-dev.21.candidate.41755813555.1.2**, selected by `format: expert-release`. This requires an updated Cortex Host; older wrapper-only Hosts are incompatible. Production Desktop routing and releases are unchanged. See [EPD release details](EPD_RELEASE.md).
 
-Do not use installation, manifest validation, an HTTP 200, CLI exit zero or a rendered report as evidence of product acceptance, ISO conformity, a signed verification opinion or certification.
+EPD is a published incremental prerelease. Original candidate `promotable:false` evidence is retained; stability, normative coverage, holdout and institution-approved template acceptance remain incomplete. Do not equate publication, installation, CLI exit zero or a report with professional acceptance or certification.

docs/EPD_RELEASE.md

@@ -0,0 +1,32 @@
+# EPD incremental prerelease supply
+
+## Versions and native layout
+
+- Plugin package: **0.1.2**.
+- Actual CLI: **0.1.0-dev.21.candidate.41755813555.1.2**, built with Bun1.4.4.
+- Platforms: macOS arm64, Linux x64, Windows x64. Intel Mac is unsupported.
+- Source: the publisher's immutable `experts/cortex-epd/vVERSION/PLATFORM/` archives and matching download/release manifests. [Installation guide](https://download.hiq.earth/experts/cortex-epd/install.md).
+
+Unlike the retired catalog supply wrapper, this entry points directly to the original native release. `components.cli.version` is the executable's actual prerelease version. `format: expert-release` selects `release-manifest.json`, executable `cortex-epd` (`.exe` on Windows), and `assets/skills/epd-audit/SKILL.md`. No new wrapper or repacked binary is created.
+
+The full archive SHA256 is pinned in [the root catalog](../marketplace.json). Preserve the whole native release, including its signing/build declarations, parser lock and domain sidecars. The complete host operating skill and its references are materialized from the same release; the internal professional-verifier skill is not exposed as an independent host skill.
+
+## Host compatibility
+
+The new supply format requires a Cortex Host with explicit `expert-release` support: actual prerelease versions, immutable `/experts/NAME/vVERSION/` URLs and the native release-manifest layout. Older Hosts that only accept `/cli/` wrappers cannot consume this entry. Do not label the new executable as wrapper0.1.0 to evade their validation.
+
+This repository is not production Desktop's configured source, and this update does not switch it or publish Desktop. A compatible Host build and its own release/acceptance gates are prerequisites before adopting the updated Cortex catalog. Native Claude Code plugin installation remains instruction-only and does not provision the CLI; use the publisher's verified native installation process separately.
+
+## What changed
+
+The publisher reports an updated Bun runtime/network-error classification, explicit rereading of frozen engagement/selected-check catalogs after compaction, bounded native compaction continuation, and DOCX report fidelity fixes. These are incremental fixes, not a claim that production network disconnects or all professional acceptance requirements are solved.
+
+## Requirements and limitations
+
+Prepare the locked Docling2.140.0-1 runtime separately after verifying the download length/hash. Reviews require the intended CLI device login, `epd-audit` entitlement, a confirmed engagement and explicit model-cost authorization. Installation and offline inspection do not authorize a review. An approved external template may be needed for DOCX reporting.
+
+macOS release bytes carry the publisher's Developer ID/notarization declaration. Windows is explicitly **unsigned / Authenticode NotSigned** and can show SmartScreen; do not disable OS protections. Linux signing is not applicable.
+
+This is a **published incremental prerelease**, not stable or full professional/product acceptance. Cumulative same-candidate repeat-run stability, complete normative coverage, clean holdout and institution-approved templates remain incomplete. A real-case run exhausted native network retries and remained blocked without a final report. The original immutable candidate's `promotable:false` evidence is retained; public incremental distribution does not rewrite it as acceptance.
+
+Reports and successful CLI exits are not certificates or signed opinions. No paid end-to-end review is repeated for this catalog update. The supply check exercises installation/extraction, actual version, release-owned skill materialization and native discovery only.

docs/INSTALLATION.md

@@ -18,7 +18,7 @@ Install one or more plugins by ID:
 /plugin install cortex-epd@hiq-plugins
 ```
 
-These are Claude Code interface commands, not shell commands. Choose only the plugins you need. The last two are prerelease; EPD is demo-only. This repository is an independently maintained marketplace, not an official-directory listing.
+These are Claude Code interface commands, not shell commands. Choose only the plugins you need. The last two are prerelease; EPD is an incremental prerelease with incomplete stability/professional acceptance. This repository is an independently maintained marketplace, not an official-directory listing.
 
 ## 2. Prepare the corresponding native CLI
 
@@ -30,14 +30,14 @@ For manual preparation:
 
 1. Choose the exact platform entry in the catalog. If your platform has no entry, it is unsupported by this catalog; do not run another platform's binary.
 2. Download its archive into a new directory. Verify the entire archive against the listed SHA256 **before** extraction or execution. Downloading an archive is not permission to run it.
-3. Extract the complete archive. Preserve the directory structure and sidecars; do not copy only the executable. Expert archives contain `upstream/` and a wrapper manifest. Other archives use their own release layout.
+3. Extract the complete archive. Preserve the directory structure and sidecars; do not copy only the executable. The openLCA archive uses `upstream/` and a wrapper manifest; EPD uses its native release-manifest layout without a wrapper. Other archives use their own release layout.
 4. Invoke the listed relative executable from the extracted release root by its absolute path, or register it through the CLI's own documented installation process after authorization. On Windows use native PowerShell quoting and the release's Windows executable/entry; do not require a POSIX shell.
-5. Check version and help using that exact release. The expert archives use supply wrapper `0.1.0`, but their executables report prerelease versions. A plugin version, archive directory name or successful download does not prove runtime readiness.
+5. Check version and help using that exact release. openLCA uses supply wrapper `0.1.0`; EPD pins its actual prerelease version directly. A plugin version, archive directory name or successful download does not prove runtime readiness.
 6. If using a release-owned operating skill in another host, use that CLI's documented skill installation mechanism. Do not overwrite an existing customized skill, register all hosts or change global permissions without authorization.
 
 Publisher entry points are available for [Editor](https://download.hiq.earth/cli/hiq-editor/install.md), [Nora](https://download.hiq.earth/cli/cortex-org-wiki/install.sh) and [JiMU](https://download.hiq.earth/cli/jimu-lca/install.sh). Inspect the instructions and platform/version before running an installer. A script link is not a recommendation to pipe an uninspected response into a shell. For both expert previews, use the pinned archives; do not infer a current installer URL from the CLI name.
 
-The proposed newer EPD `experts/cortex-epd/latest.json` and `install.sh` endpoints returned HTTP 403 during verification on 2026-11-04. They are not usable public installation paths in this guide. The catalog's older candidate archives are separate, accessible artifacts; they are not a release of dev.21.
+EPD public [installation instructions](https://download.hiq.earth/experts/cortex-epd/install.md) and versioned manifests are now available for **0.1.0-dev.21.candidate.41755813555.1.2**. The Cortex entry requires explicit `expert-release` Host support; an older wrapper-only Host cannot consume it. See [the release boundary](EPD_RELEASE.md).
 
 ## 3. Confirm version and access
 
@@ -49,11 +49,11 @@ Run the relevant discovery command only after trusting and preparing the release
 | Editor | `hiq-editor version --json`, `--help` | CLI login, correct account/organization/datasource and business permissions |
 | JiMU | `jimu-lca --version`, `--help` | macOS arm64; user's controlled member-key configuration; this archive does not include the addon required by native login |
 | openLCA modeling | `cortex-lca-expert version`, `--help`, `status --offline` | Official openLCA installation, selected workspace/database, CLI device login and `lca-modeling-expert` entitlement; ordinary modeling does not require Pi/model login |
-| EPD demo | `cortex-epd version -f json`, `--help`, `doctor --offline -f json` | Matching candidate's full sidecars, separately installed locked Docling 2.140.0-1 (approximately 0.8–0.9 GB download), CLI device login and `epd-audit` entitlement for reviews |
+| EPD prerelease | `cortex-epd version -f json`, `--help`, `doctor --offline -f json` | Matching candidate's full sidecars, separately installed locked Docling 2.140.0-1 (approximately 0.8–0.9 GB download), CLI device login and `epd-audit` entitlement for reviews |
 
 Do not put member keys or API keys in chat. Use the CLI's existing controlled credential mechanism. Do not inspect credential files or copy tokens from Desktop or another checkout. A missing entitlement is an access limitation, not a reason to switch endpoints or identities.
 
-EPD offline doctor can report not ready when Docling or authentication is missing. That is not permission to download, log in, start a review or incur model costs automatically. A review requires a confirmed engagement, authorized materials and explicit model-cost authorization. The demo candidate is not approved for formal promotion or certification.
+EPD offline doctor can report not ready when Docling or authentication is missing. That is not permission to download, log in, start a review or incur model costs automatically. A review requires a confirmed engagement, authorized materials and explicit model-cost authorization. The incremental prerelease does not establish completed professional acceptance or certification.
 
 ## 4. Start with a bounded task