[OCR compatibility] Qualify v1.11.5

[github-actions]

OCR v1.11.5 compatibility evidence

• machine result: compatible
• classification: human-review-required
• all upstream asset digests and sha256sum.txt: verified
• Linux amd64 version/help/preview/result-consumer probes: passed

Upstream release changes

• release: https://github.com/alibaba/open-code-review/releases/tag/v1.11.5
• compare: alibaba/open-code-review@v1.11.4...v1.11.5
• current tested baseline: v1.11.3
• published: 2026-09-05T04:23:21Z

## 🚀 Features

- feat(viewer): mark comments as fixed/ignored and hide them (#1101)

## 🐛 Bug Fixes

- fix(deps): bump grpc, fast-uri and browserslist to patch high-severity advisories (#1169)

## 🔧 Refactoring

- refactor: retire per-file naming left over from grouped review (#1168)

**Full Changelog**: https://github.com/alibaba/open-code-review/compare/v1.11.4...v1.11.5

Classification reasons

• release notes contain a material or ambiguous compatibility signal

Human checklist

• Review upstream release notes and relevant commits.
• Confirm compatible or incompatible.
• Confirm tested support and recommended-version promotion.
• Route any compatibility change through protected PR and stable release gates.

Workflow evidence

• run: https://github.com/xeonvs/open-code-review-toolkit/actions/runs/34030847135
• classification: human-review-required

[xeonvs]

Draft handoff receipt

Implementation and local/hosted verification are complete in Draft PR #178.

• Commit: d570195a595a8cf33bdde2d7a7d909e7d7e4eabe
• Tree: da6e85558919db80ddad5ed7ec2faded24a969b1
• Runtime subtree: 4fb9322348850340cf97a5b5ea99d03166ef6f5c
• All 13 reported PR checks passed, including both macOS jobs, Linux Python 3.12–3.14, packages, dependencies, Security and CodeQL.
• Final OCR qualification: https://github.com/xeonvs/open-code-review-toolkit/actions/runs/34023700224 — passed. Downloaded Linux contracts and asset hashes exactly match the committed expanded 1.11.5 evidence.
• Local: 1524 tests + 408 subtests; 86.39% coverage; all four risk groups passed. Real no-LLM OCR 1.11.4/1.11.5 contracts were identical before/after qualification refactoring.
• Verified private-arguments/DLP/publication equivalence through the real toolkit finalization and posting workflow with captured GitLab transport.
• Qualification maintenance instructions are now canonical and routed from AGENTS.md; live probes no longer select behavior by historical OCR versions, while archived evidence readback remains isolated.

The final workflow is a regression run against the already-promoted Draft manifest. Original adjacent 1.11.3→1.11.4 and 1.11.4→1.11.5 audit identities remain in the two separate committed evidence files and manifest conclusions.

This completes WQ-06's local and hosted delivery portion. Real LLM/model validation remains pending in another configured environment. Follow the Draft body checklist using this PR's built toolkit wheel and exact OCR 1.11.5, not the published 0.9.0 wheel. PR remains Draft and mergeable, with no unresolved threads; issues #176/#177 and milestone v0.9.1 remain open. No merge or package publication was performed.

[github-actions]

Stable v0.9.1 delivery is verified by immutable release asset release-receipt.json in v0.9.1 (SHA-256 4cff33ee3627d3d1fb1226afa819d44cb1ecb3eade9fb9a09c6b3946353a3433).