Finish decision guard fixes and bind final 1.7.9 candidate evidence

Author: Coding-Dev-Tools

BENCHMARKS.md

@@ -94,14 +94,14 @@ interpretation and do not count as additional benchmark-quality gains.
 ### Public numeric evidence registry
 
 Every exact public aggregate retained below comes from the checked-in, public-safe
-[`offline-fixtures-v125.json`](docs/benchmark-evidence/offline-fixtures-v125.json) artifact. Its
+[`offline-fixtures-v127.json`](docs/benchmark-evidence/offline-fixtures-v127.json) artifact. Its
 SHA-256 is
-`1f74971d6213a188b31cf58f6ff6132a487da36d22455292b028dadc202a8feb`, also recorded in the
+`f8cc72f489e001d68c217c4eefdf60b7b7208395dbd848a19a4ac713d2d0a369`, also recorded in the
 adjacent `.sha256` file. The artifact contains no raw questions, answers, prompts, customer data,
 or per-record content fingerprints.
 
 The fixture-suite digest is
-`42cb269b867a1e3210d0da77d6a040abc974cd44317b91ad10a2d483d07c1586`. The artifact defines
+`9c9cdb3071b4f31a4a7c6a0aebaf8006dc8671ae1f2f6e81d6b29ee0780ae766`. The artifact defines
 the digest algorithm and records the SHA-256 of every suite and dataset file. Each evidence ID
 also binds its exact command through `sha256(UTF-8 exact command)`:
 
@@ -123,10 +123,10 @@ Historical LoCoMo, graph, handoff, consolidation, and security figures remain pr
 source artifacts but are omitted from the current chart until each has a matching immutable,
 public-safe artifact. The chart labels coding outcomes, external datasets, and operational
 capacity as pending evaluation tracks rather than implying scores. Regenerate it with
-`python scripts/render_benchmark_report.py --report docs/benchmark-evidence/offline-fixtures-v125.json --output docs/images/context-efficiency.svg` after selecting the report to publish.
+`python scripts/render_benchmark_report.py --report docs/benchmark-evidence/offline-fixtures-v127.json --output docs/images/context-efficiency.svg` after selecting the report to publish.
 
 The companion examples are also generated from that artifact with
-`python -m scripts.render_benchmark_examples --report docs/benchmark-evidence/offline-fixtures-v125.json --output docs/images/evidence-backed-agent-examples.svg`.
+`python -m scripts.render_benchmark_examples --report docs/benchmark-evidence/offline-fixtures-v127.json --output docs/images/evidence-backed-agent-examples.svg`.
 The historical-to-executable mapping is in
 [`docs/BENCHMARK_CHANGE_COVERAGE.md`](docs/BENCHMARK_CHANGE_COVERAGE.md).
 

CHANGELOG.md

@@ -5,6 +5,8 @@ All notable changes to Engraphis are documented here. Format loosely follows
 
 ## [Unreleased]
 
+## [1.7.9] - 2026-09-29
+
 - Classify local `engraphis_decide` command advice conservatively. Chained, piped,
   substituted or redirected commands, and options that run programs or write files
   (`rg --pre`, `pytest --basetemp`), are never labeled read-only. Recursive deletes in any
@@ -39,13 +41,10 @@ All notable changes to Engraphis are documented here. Format loosely follows
   bar is now `uncertain` with a null `is_complete`, instead of a decisive failure.
 - Local completion checks recognize `N passing` (Mocha/Jest style), `not passing`, `0 passing`
   and `errors: none`.
-- Updated the Pi extension's locked `fast-uri` to 3.1.8 and `ip-address` to 10.7.2 for newly
-  published advisories. CI runs the Pi checks under bash on Windows too, so a failed install,
-  build or test is no longer hidden behind the final audit, and development advisories fail
-  except those pinned inside the Pi test host's own lockfile, which stay visible as warnings.
-- Refreshed the public offline fixtures and source bindings in immutable v125 evidence.
-
-## [1.7.9] - 2026-09-29
+- Preserve individual negation targets in local contradiction advice, so a shared prohibition
+  cannot hide a separate conflict; different explicit subjects defer. Forced Git branch resets
+  and clustered deletion flags are destructive advice, and explicit Git diff/textconv or
+  ripgrep hostname helpers are never labeled read-only.
 
 - Added the saved-session managed Jev transport and Classic/Smart MCP decision route
   for Pro and Team, with explicit consent and current hosted entitlement checks.
@@ -90,7 +89,8 @@ All notable changes to Engraphis are documented here. Format loosely follows
 - Rebuild FastMCP settings eagerly to avoid a forward-reference warning on newer SDKs.
 - Preserve CSS gradient tiles, screen blending and reduced-motion opacity in graph PNGs,
   including fractional display scaling; synchronize graph cache metadata across threads.
-- Refreshed public offline fixtures and source bindings in immutable v117 evidence for 1.7.9.
+- Refreshed public offline fixtures and source bindings in immutable v127 evidence for the
+  final 1.7.9 candidate; historical artifacts remain unchanged.
 - Campaign adapter capabilities and metrics now report the loaded Engraphis runtime version.
 
 - Added saved project-to-workspace routing and connection instructions so agents can use the

README.md

@@ -84,9 +84,9 @@ neither is an end-to-end question-answer score. Coding outcomes, external datase
 operational capacity remain separate pending evaluation tracks until their artifacts are selected.
 
 These values are evidence IDs `offline-chunking` and `offline-performance` in
-[`offline-fixtures-v125.json`](https://github.com/Coding-Dev-Tools/engraphis/blob/main/docs/benchmark-evidence/offline-fixtures-v125.json),
+[`offline-fixtures-v127.json`](https://github.com/Coding-Dev-Tools/engraphis/blob/main/docs/benchmark-evidence/offline-fixtures-v127.json),
 SHA-256
-`1f74971d6213a188b31cf58f6ff6132a487da36d22455292b028dadc202a8feb`.
+`f8cc72f489e001d68c217c4eefdf60b7b7208395dbd848a19a4ac713d2d0a369`.
 [`BENCHMARKS.md`](https://github.com/Coding-Dev-Tools/engraphis/blob/main/BENCHMARKS.md#public-numeric-evidence-registry)
 records the matching suite digest, exact commands, and per-command config digests. The offline
 fixture registry intentionally excludes external, model-dependent, consolidation, productivity,

docs/RELEASE_1_7_9.md

@@ -1,11 +1,17 @@
 # Engraphis 1.7.9 release preparation
 
-This candidate packages the reviewed managed Jev client and graph fixes from
-Core PRs #238 through #241. Its base is
+This candidate packages the managed Jev client, workspace routing, graph fixes,
+local decision hardening, Anthropic compatibility, and Pi dependency repairs from
+Core PRs #238 through #243. The original release-preparation base is
 `f10dbc40de2d8bb2b0b7ab9bddb4870f6115a64c`. Preparing a version and validating its
 source does not publish it or enable the Cloud service. The existing 1.7.8
 release remains immutable.
 
+All planned changes are collected under the 1.7.9 candidate CHANGELOG section.
+The final source is bound by immutable `offline-fixtures-v127.json`; those local
+fixtures establish their documented deterministic boundaries. They do not qualify
+the hosted provider or authorize publication.
+
 ## Customer upgrade after publication
 
 Managed Jev requires both this client and an enabled, qualified Cloud deployment.