[abruption]

Prepare v0.3.1 with the merged transport fixes (#35), bounded startup readiness (#36), and execution-context diagnostics (#37). Update VERSION, changelog, English/Korean installation pins and the release/publication checklist.

Merge #36 and #37 first, then merge this preparation PR. Their actual branch commits are integrated here so the release candidate can run combined CI; this does not merge either PR into main or publish anything.

Scope

• fix: wait for backend readiness during startup #25 / fix: wait for backend readiness during startup #36: a 30-second backend-readiness phase, bounded queries, transient NoState/Starting retries and distinct ready/auth/query/approval results.
• feat: explain execution-context restrictions in doctor #26 / feat: explain execution-context restrictions in doctor #37: current-context directory/socket visibility and read-only diagnostics, safe GUI guidance, existing report/exit compatibility.
• fix: validate proxy apply log before stopping the current daemon #32–fix: reject malformed WebSocket server frames before forwarding #34 / merged fix: protect proxy rollback and preserve tunnel framing #35: prevalidated rollback log descriptor, CONNECT remainder preservation and malformed WebSocket frame rejection.
• Package four individual source files plus ZIP/tar.gz and SHA256SUMS at publication. Tailscale remains 1.102.4.

Checks before publication

• fix: wait for backend readiness during startup #36 reviewed and merged.
• feat: explain execution-context restrictions in doctor #37 reviewed and merged.
• Combined release-candidate CI passed all 178 tests on each of Python 3.11 and 3.13, plus Bash syntax/ShellCheck.
• Final main CI passed on release commit e934fa4.
• Publication authorized by the maintainer; release date finalized as 2026-10-19.
• Annotated tag and all seven uploaded asset checksums verified; v0.3.1 published.

The candidate documentation intentionally pins v0.3.1 downloads that become available when publication is authorized. The current published release remains v0.3.0. No tag/release or live Dots deployment is performed by this PR, and the ongoing watchdog experiment remains separate #20 evidence.

The candidate includes the #36 automatic-review follow-up (6e0a0dd) covering delayed API readiness and machine approval after authentication-command failure.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-19T05:36:56.707662Z	15addc0	Manual request
🔒 Security Review	✅ Completed 2026-10-19T05:09:30.435040Z	0b04fb7	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[abruption]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. 👍

Reviewed commit: 15addc0529

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".