Record 0.2.0 publication and preserve MoonX command argv [skip ci]

Author: ZSeanYves

.github/workflows/check.yml

@@ -135,14 +135,14 @@ jobs:
         if: github.event_name == 'workflow_dispatch' || github.event_name == 'schedule'
         run: >-
           ./_build/native/release/build/mooxCLI/cmd-tests/release_runner/release_runner.exe
-          --manifest tests/release_runner/manifest.json --suite smoke
+          --manifest tests/release_runner/published-0.2.0.json --suite smoke
           --report-dir test-reports/published-smoke
 
       - name: Published-version differential
         if: runner.os == 'Linux' && (github.event_name == 'workflow_dispatch' || github.event_name == 'schedule')
         run: >-
           ./_build/native/release/build/mooxCLI/cmd-tests/release_runner/release_runner.exe
-          --manifest tests/release_runner/manifest.json --suite differential
+          --manifest tests/release_runner/published-0.2.0.json --suite differential
           --oracle-image mooncmd-oracle:phase0
           --report-dir test-reports/published-differential
 

README.mbt.md

@@ -6,10 +6,12 @@ system for preserving GNU/POSIX and command-upstream behavior. Authorization
 belongs to the caller or host; commands preserve the caller's environment and
 stream semantics.
 
-The working tree prepares **0.2.0**, which is not yet published. See the
-[candidate evidence](docs/reports/2026-09-20-fidelity-implementation.md),
+**0.2.0 is published** as `cli/core` and 47 command modules. Linux, macOS and
+Windows passed the release source checks, including Linux Native/Wasm pinned
+oracle comparisons. Exact-version MoonX acceptance is recorded separately in
+the [release evidence](docs/reports/2026-09-21-release-0.2.0/README.md). See the
 [support record](docs/compatibility.md), and
-[upstream API gaps](docs/async-upstream-gaps.md). The candidate includes a
+[upstream API gaps](docs/async-upstream-gaps.md). This release includes a
 persistent line-oriented `sh -i`, real `make -j` scheduling, JSON input framing,
 Basic HTTP authentication and cookies. Strict filesystem limits are explicit:
 default `cp` and existing-file `touch` cannot be implemented faithfully with
@@ -19,9 +21,9 @@ Releasable commands are available as independent modules under
 `cli/<command>`:
 
 ```text
-moonx cli/base64
-moonx cli/grep pattern input.txt
-moonx cli/jq -r '.name'
+MOON_HOME="$HOME/.moon-accounts/cli" moonx cli/base64@0.2.0
+MOON_HOME="$HOME/.moon-accounts/cli" moonx cli/grep@0.2.0 -- pattern input.txt
+MOON_HOME="$HOME/.moon-accounts/cli" moonx cli/jq@0.2.0 -- -r '.name'
 ```
 
 ## Commands
@@ -61,10 +63,10 @@ The command set is designed for native and Wasm execution. Under Wasm, commands
 can run with explicit policies that limit filesystem access, mutations,
 processes, network access, and permission changes.
 
-Commands that only read input use the default admission tier. Commands that
-spawn processes, access the network, or change permissions require explicit
-authorization. Denied operations fail with a nonzero status and are tested to
-leave no unintended side effects.
+The caller configures host authorization. Command capability declarations
+describe their requirements and do not add a command-level policy. Host-denied
+operations fail with a nonzero status; the policy suite checks the resulting
+effects independently of command compatibility.
 
 The repository intentionally does not provide `chown` or `kill`, because the
 required owner-mutation and arbitrary-process-signalling capabilities are not
@@ -110,7 +112,8 @@ The project combines package tests and two runners sharing a Native testkit:
 - `oracle` compares Native and Wasm commands with the pinned upstream image,
   including declared metadata observations. GNU and stress are independent suites.
 - `release_runner` validates candidate manifests and checks exact published
-  MoonX versions. The current 0.2.0 candidate is unpublished.
+  MoonX versions selected by `published-0.2.0.json`; frozen 0.1.x manifests remain
+  available for historical replay.
 - `scenarios` covers persistent shell input, HTTP auth/cookies, filesystem
   boundaries and process/make lifecycle on both backends in CI. Former standalone
   probes are archived with their assertion migration maps.

docs/adr/0001-evidence.md

@@ -3,7 +3,7 @@
 Status: Accepted
 Date: 2026-09-05
 Updated: 2026-09-21
-Revision: Share test mechanisms and active cases; separate invocation health, semantic compatibility and explicit capability boundaries.
+Revision: Share test mechanisms and active cases; separate invocation health, semantic compatibility and explicit capability boundaries; record the three-platform 0.2.0 source gate and subsequent publication.
 
 ## Target and decision
 
@@ -82,7 +82,23 @@ atime relations use the same fixture in a boundary or stateful scenario.
 Baseline: moon/moonrun 0.1.20260915; moonc/core 0.10.13+cbb11c36f;
 async 0.22.1; x 0.5.5; moonjq 0.1.2. The dependency refresh found no older external
 versions in the resolved tree. Upgrade-only tests passed Native 104/104 and
-Wasm 91/91 before behavior changes. The current candidate remains unpublished.
+Wasm 91/91 before behavior changes.
+
+The [0.2.0 source gate](https://github.com/moonbit-community/cmd/actions/runs/35576541301)
+passed Linux, macOS and Windows at source commit
+`442015078b8dc01f64f499e5df0847d7c7458c3d`, including Linux Native/Wasm pinned
+oracle checks. After that gate, `cli/core@0.2.0` was published first, followed
+sequentially by 47 command modules. `timeout` remains local-only. Publication
+receipts and the separate exact-version MoonX gate are recorded in
+[release evidence](../reports/2026-09-21-release-0.2.0/README.md). The published
+manifest selects 382 active cases; the frozen schema 1 manifests and candidate
+preparation manifest retain their original roles.
+
+The consumer driver inserts a MoonX argument separator after the exact package
+coordinate. This preserves a command's own leading `--` without changing the
+command contract. Do not alter expected command output to compensate for argv
+lost in a launcher. Revisit this adapter if MoonX changes its parsing contract;
+keep direct exact-version probes for commands that consume a leading separator.
 
 The 2026-09-21 final migration check found a newer official toolchain manifest
 (moonc 0.10.14+7d59c7ec9 and moon/moonrun 0.1.20260920). This release gate pins