Release v0.8.1

[xeonvs]

Stable release candidate

• stable version: 0.8.1
• next development line: 0.8.2
• exact reviewed head: 8135ce658c4012eeb37868983f76c10a0ae1ad82
• exact tree: 9f3f9487bf9dbf2f489a0cd8feb1b0104e409f03
• protected base / feature squash merge: 3f5c756ca5b6ccf62043765908fdc2cf2b29e14a
• deterministic source epoch: 1787598637
• tracked release issues: Canonicalize LLM provider endpoints and publish actionable safe failure diagnostics #129, Expose an optional protocol-aware LLM completion cap #130, Deduplicate protected CI and release validation stages #132

Included delta

• Adds the optional protocol-aware OCR_LLM_MAX_COMPLETION_TOKENS contract, unset by default.
• Fixes provider URL/configuration ownership and projects private OCR retry facts into safe provider-neutral GitLab failures.
• Preserves previous reviews and prevents failed runs from posting findings or approving.
• Deduplicates repeated validation while retaining all OS/Python, security, package, TestPyPI, release-PR, and stable-release boundaries.
• Keeps OCR pinned to qualified 1.9.10.

Development artifact evidence

Feature PR #131 was squash-merged as 3f5c756ca5b6ccf62043765908fdc2cf2b29e14a. TestPyPI run 32766642880 published and read back 0.8.1.dev68 with verified provenance and clean installs:

• wheel SHA-256: 764d00835c725fa67274b48d95420bb5e3b3d0be28043dc73203cc166bad1ad0
• sdist SHA-256: a9faf493df1d03d0f078ad6807fc04f9dc7cdc82aafc24ac9fec30cbd9843a12

Release-candidate validation

• 89 focused release/documentation tests passed.
• scripts/quality.sh check: 1,232 tests + 306 subtests, 86.13% combined branch coverage, risk groups 84/82/85/87, Ruff, mypy, and Bandit passed.
• Dependency audit, lock, OCR manifest, release notes, JSON metadata, pinned Gitleaks 8.24.3, and diff checks passed.
• Two explicit 0.8.1 builds were byte-identical; Twine and clean wheel/sdist installs passed on Python 3.12, 3.13, and 3.14.
• Candidate wheel SHA-256: 05c3f7425bf69c494da9b5b689ac712daf8d1c3587a7fa564dea67e7c2eb47bc.
• Candidate sdist SHA-256: 14be57f3b0a94d37bb749b10f2494d7fb6d757f688f6e0b727fb750f2fafae8e.

This is the final repository mutation for 0.8.1. After exact-head checks pass, protected squash merge starts the unchanged stable publication, provenance, registry readback, supported-Python install, immutable Release, receipt, issue, and milestone reconciliation workflow.