chore(main): release 0.4.6

[github-actions]

🤖 I have created a release beep boop

0.4.6 (2026-10-14)

Bug Fixes

• preserve lossless lock and transcript identities (#135) (95ea586)
• recognize source-reviewed exec cyber access option (#130) (38b7ad0)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 Created releases:

• v0.4.6

🌻

[abruption]

v0.4.6 release verification

• Release PR chore(main): release 0.4.6 #138 merged through normal protection gates after all 39 checks passed. Final candidate 4d427b1b72ed58fd1cf6a824e8bdfaf25a392036 received a separate read-only Codex release-diff/workflow review with no blocking findings; GitHub automatic review comments were absent. No administrator bypass was used.
• Release commit and tag: 3bc40919446c47d274b2d369d08ea1cdf373b74b.
• Final main CI: https://github.com/abruption/codex-unlock/actions/runs/38497495276 — success.
• Release/build/publish: https://github.com/abruption/codex-unlock/actions/runs/38497495459 — success.
• GitHub release v0.4.6 is immutable. npm latest is 0.4.6.
• Registry tarball SHA-256 1401614fde80f32989b8acbd2473f539e5b65e1c426b2f72ee5003315ba92ef1 matches the artifact checked by the publish job.
• npm publish and SLSA attestations are present. Provenance identifies the release commit, this repository's release workflow, and the successful run above.
• Clean dependency install added exactly three packages; --version returned 0.4.6 and --help passed. npm audit signatures verified registry signatures for three packages and attestations for two packages, with no errors. These counts describe the installed dependency tree, not just codex-unlock.
• No actual Codex session was signaled. Windows/Rust experiments remain unpublished research fixtures, not production Windows support. Draft fix: prototype Linux descriptor-level flock attribution #137 and unfinished issues research: evaluate a Rust prototype for native Windows support #122/security: design Linux descriptor-level flock owner verification #126/research: define the macOS lock holder and visibility contract #127 remain follow-up work in v0.4.7.

The v0.4.6 milestone has no remaining open items and is complete.