release: add guarded current-project alias operator

[0thernet]

Summary

• add a strict current-project-only hra.sh alias plan and operator
• require UUID-bound exact record confirmation, full provider readback, a serialized durable intent/receipt ledger, and closed recovery states
• retire the legacy domain operator ambient/default provider paths
• document the exact read-only preflight and separately gated execution procedure

Safety

• no alias, DNS, domain ownership, deployment, Convex, tag, or release mutation was executed
• the only constructed alias write is the direct current-project deployment-alias endpoint
• ambiguous target results and receiptless intents hard-stop without replay or opposing writes

Validation

• TypeScript and ESLint
• 132 focused current/domain/workflow/authority tests
• adversarial review: no remaining P1/P2
• full repository tests, site check, and builds in the source worktree
• clean single-branch package gate: 10 policy tests plus isolated local/global package consumers, PTY shell, and daemon lifecycle

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
hra	Ready	Preview	Aug 29, 2026 8:10am