chore(release): compose DKG 10.0.14 selected-public convergence candidate

[branarakic]

Outcome

This is the exact DKG 10.0.14 integration candidate over testnet-canary. It composes the independently reviewable selected-public convergence stack, moves all 22 release packages to 10.0.14, and adds operator-facing release notes.

It remains a draft until the source PRs are merged independently and the fresh-receiver Testnet certification passes.

Included review stack

• fix(rfc64): resolve cold selected CG bindings from chain #2205 — resolve a cold selected public CG binding from finalized chain state
• fix(agent): promptly continue selected public SWM catch-up #2210 — promptly continue selected public SWM catch-up after bounded progress
• feat(agent): reconcile selected public VM from chain truth #2184 — reconcile selected public VM from chain inventory with deployment-fenced progress
• feat(agent): batch public VM recovery by bounded footprint #2204 — recover exact VM assets in byte/quad/heap-bounded microbatches
• fix(chain): tolerate recovered RPC minority during CG binding #2218 — tolerate a transient minority of failing public RPCs while resolving a finalized CG binding
• fix(agent): retain adaptive sync page sizing #2219 — retain adaptive sync page sizing across bounded continuations
• fix(agent): normalize durable sync shutdown aborts #2220 — normalize durable-sync shutdown aborts without mutating caller-owned errors
• fix(agent): resume selected SWM metadata monotonically #2221 — resume a selected SWM metadata transfer monotonically across bounded outer invocations
• fix(agent): retry incomplete selected SWM promptly #2227 — preserve selected-SWM retry until typed, fail-closed whole-scope completion evidence exists

The candidate also includes the already-merged 10.0.14 canary foundation, including #2145, #2146, #2147, #2182, #2203, and #2211.

User impact

For an explicitly selected, publicly readable Context Graph:

• RFC-64 signed catalogs are authoritative for the SWM-only inventory;
• finalized blockchain inventory is authoritative for VM;
• bounded SWM metadata progress is retained and resumed instead of restarting at offset zero after a retryable interruption;
• incomplete selected SWM makes another bounded attempt without being suppressed by generic peer freshness;
• useful partial progress remains visible without falsely stamping the provider fresh;
• clean empty selected scopes terminate explicitly, while timed-out or graph-backed zero-ref scopes remain fail-closed and retryable;
• page sizing learns a safe value per peer/CG/plane/phase and reuses it across continuations;
• multiple small VM assets share a bounded recovery request, while large assets remain isolated by byte, quad, and heap budgets;
• persisted user subscriptions resume after restart;
• a fresh receiver can resolve the CG from chain state without pre-existing ontology/store metadata;
• receiver shutdown drains retained transfers before store teardown and safely handles immutable abort reasons.

With rfc64PublicCatalog absent or disabled, the new convergence lane remains dormant. Private CG catalog cold-join is not enabled by this release; existing private encrypted sharing is unchanged. There are no contract or deployment changes.

Before

sequenceDiagram
    participant Operator
    participant Edge
    participant Provider
    participant Chain
    Operator->>Edge: Select public Context Graph
    Edge->>Provider: Run one bounded SWM or VM pass
    Provider-->>Edge: Return partial progress or timeout
    Edge->>Edge: Discard SWM prefix or stamp peer fresh
    Edge->>Provider: Restart later after freshness delay
    Edge->>Chain: Read finalized VM evidence
    Edge->>Provider: Request VM assets with coarse limits

Loading

After

sequenceDiagram
    participant Operator
    participant Edge
    participant Catalog as RFC-64 SWM provider
    participant Chain
    participant Provider as VM provider
    Operator->>Edge: Select public Context Graph
    Edge->>Chain: Resolve finalized CG binding and VM inventory
    Edge->>Catalog: Fetch and verify signed SWM catalog
    Catalog-->>Edge: Return bounded metadata and snapshot progress
    alt Selected scope incomplete
        Edge->>Edge: Retain prefix and record progress without freshness
        Edge->>Catalog: Retry when cooldown and backoff permit
    else Exact scope complete
        Edge->>Edge: Clear retry requirement and restore freshness suppression
    end
    Edge->>Provider: Fetch bounded VM microbatch
    Provider-->>Edge: Return exact finalized VM assets
    Edge->>Edge: Persist fenced cursor and verify completeness

Loading

Validation

• Candidate exact head: 1472dc82f2a69c7e3292dd96fd50760f2caa3c07
• pnpm release:verify-versions --version 10.0.14 (22/22 packages)
• Agent build, type tests, package-root test, and release packaging tests (23/23)
• Selected-SWM/on-connect focused suite after final review fix: 9 files / 134 tests passed
• Certified head 5da0082a… and final head 1472dc82… emit byte-identical Agent runtime JavaScript (235/235 files); the final delta only relocates a TypeScript contract
• Fresh empty-receiver Testnet certification: SWM 901/901 exact (36,702,309 bytes) and VM 400/400 exact (15,428,882 observed bytes)
• Independent SWM fixture audit: 901/901 exact before restart and 901/901 exact after restart
• Receiver-only restart retained exact parity with reconciler, RFC-64 catalog, subscriptions, rehydration, durable sync, and system-graph sync disabled
• Sanitized evidence bundle excludes auth tokens, wallets, libp2p identity, stores, and runtime state; bundle manifest SHA-256 0731d02e7bf0c07eabdfb1ad315f1637f5c603cabf733883ee3cf10e0827dfdb
• Exact-head GitHub CI

Merge order

Do not merge this draft as a substitute for the source reviews. Merge the source PRs independently once their exact heads are green; then refresh this branch onto testnet-canary, rerun release and Testnet gates, and merge only the resulting release-preparation delta.