Release ShellSyntaxTree 0.4.0-beta.1

Directory.Build.props

@@ -7,7 +7,8 @@
     <LangVersion>latest</LangVersion>
     <Nullable>enable</Nullable>
     <TreatWarningsAsErrors>true</TreatWarningsAsErrors>
-    <VersionPrefix>0.3.5</VersionPrefix>
+    <VersionPrefix>0.4.0</VersionPrefix>
+    <VersionSuffix>beta.1</VersionSuffix>
   </PropertyGroup>
   <PropertyGroup>
     <!-- Target framework matrix -->

IMPLEMENTATION_PLAN.md

@@ -174,10 +174,12 @@ priorities.
       `Microsoft.SourceLink.GitHub` 10.0.400, which replaces the vulnerable
       10.0.301 transitive `Microsoft.Build.Tasks.Git` package without
       weakening NuGet audit enforcement.
-- [ ] **Release and consume `0.4.0-beta.1`.** After review, commit the SST
-      change, publish the beta, replace Netclaw's local integration pin with
-      the public package, and rerun the paired consumer gates. No commit, tag,
-      push, or publication is part of this worktree implementation.
+- [ ] **Release and consume `0.4.0-beta.1`.** The implementation merged in
+      ShellSyntaxTree PR #173; this release-only change prepares the
+      `0.4.0-beta.1` candidate. After review, publish the beta, replace
+      Netclaw's local integration pin with the public package, and rerun the
+      paired consumer gates. Publication and downstream consumption remain
+      pending.
 
 ## Completed v0.3.0 host integration and release acceptance
 

README.md

@@ -13,12 +13,14 @@ Hand-rolled, AOT-trim friendly, zero native dependencies. Multi-targets
 
 ```bash
 # Current package
-dotnet add package ShellSyntaxTree --version 0.3.5
+dotnet add package ShellSyntaxTree --version 0.4.0-beta.1
 ```
 
-Version `0.3.5` includes the typed syntax tree, command-occurrence API,
-bounded authored-value analysis, audited filesystem and non-filesystem operand
-facts, and parser-owned working-directory effects documented below.
+Version `0.4.0-beta.1` includes bounded PowerShell collection facts,
+shell-neutral filesystem tree-access effects, and fail-closed approval-fatigue
+diagnostics alongside the typed syntax tree, command-occurrence API, bounded
+authored-value analysis, audited filesystem and non-filesystem operand facts,
+and parser-owned working-directory effects documented below.
 
 ## What you get
 
@@ -275,6 +277,9 @@ workflow asserts this and fails fast on misformatted tags.
 - **0.3.0** — typed nested syntax, complete command occurrences, bounded value
   and cwd facts, explicit redirects, Bash `for ... in`, and PowerShell
   `foreach`, while retaining the v0.2 `Clauses` compatibility projection.
+- **0.4.0** — bounded PowerShell approval-fatigue evidence, including ordered
+  collections, filesystem tree-access effects, and additive fail-closed
+  diagnostics for unsupported mutation syntax.
 - **1.0.0** — when an external consumer beyond Netclaw ships against
   it without finding API gaps.
 

RELEASE_NOTES.md

@@ -1,8 +1,7 @@
-#### Unreleased ####
+#### 0.4.0-beta.1 2026-09-14 ####
 
 This implementation slice adds bounded PowerShell approval-fatigue evidence
-while keeping unsupported mutation syntax fail closed. The release PR will
-rename and date this section for `0.4.0-beta.1`.
+while keeping unsupported mutation syntax fail closed.
 
 ## Added