feat: OACP v0.3.5

[kiloloop-release]

OACP v0.3.5.

Highlights (from the changelog)

• Receiver autonomy recalibration: sender-marked oacp-guardrails fences, negation fallback, declaration-aware lexical advisories, pinned reason-code taxonomy backed by executable conformance fixtures; external_side_effects: allow_pr_artifacts for receiver-allowlisted private repositories.
• Standing continuation grants (default-off) resolving from explicit prior human approval in-thread; oacp autonomy-outcome records structured human outcomes in schema-v2 audits — the subcommand is exposed by the installed CLI starting this release.
• Envelope compilation: oacp envelope compile|show|clear turns an admitted message's task profile plus receiver config into a runtime envelope enforced by a Claude PreToolUse hook; fail-closed compilation, executable conformance fixtures.
• Security policy: new Tier-1.5 trust-ceiling section for single-OS-user hosts.
• Hardening: bounded network timeouts in doctor --memory, structured -32603 MCP error containment, threshold-checkpoint declaration errors, review-loop telemetry field validation.

Full details in CHANGELOG.md (0.3.5 section).

🤖 Generated with Claude Code