[timfromhcs]

Summary

Patch release that closes correctness and provenance gaps found in the v2.2.0 audit.

• Single shared gate manifest (cqhecs/gate_manifest.py) drives analyzer, router, backends and the Qiskit Target.
• Strict QASM parsing: header, multiple registers with offsets, angle grammar, measurement placement; mid-circuit measurement,
  eset and classical conditions are refused before execution.
• Capability-first routing: every accepted circuit gate is executed by the chosen path, otherwise a typed refusal is raised.
• Path C enforces
  am_budget_mb fail-closed and reports process RSS separately from tensor bytes.
• Path D uses a strict observable grammar with per-observable bounds.
• Qiskit backend: exact measurement/classical mapping, non-finite parameters rejected, expanded Target for implemented Path C gates.
• Release workflow now waits for a green ci.yml run on the exact tag SHA and injects source SHA, CI run URL and final SHA256 values into the release body.

Verification (local)

• Python suite: 309 passed (CQ_HECS_REQUIRE_NATIVE=1)
• Native CTest: 14/14 passed
• Branch coverage: 81 % (gate 70 %)
• Mutation harness: 11/11 killed, baseline clean
• Fatal lint, version consistency, silent-truncation audit, 12/12 SPIR-V shaders: pass
• Wheel/sdist build + wine check: pass
• Clean-venv smoke: �ersion, doctor,
  un name:bell: pass

Scope

Patch only. No new simulator, no treewidth/tensor-contraction research features, no API-breaking change. Cloud Build and physical-GPU execution remain NOT_VERIFIED.

Release

After merge and green CI on main, tag �2.2.1; the release workflow requires green CI for the exact tag SHA before publishing.