[unlockdigital]

Changes

• Reject deceptive GitHub repository hosts before selecting credentials; retain configured IPv6 enterprise hosts.
• Show Claude command text in approvals, bound hung delegated Stop effects, and queue Copilot follow-ups without interrupting background agents.
• Distinguish the Unlock Digital fork release from its recorded upstream base and document tag-collision and migration risks.

Validation

• vp run check:changed origin/unlock-digital/main: format, lint, knip, GraphQL generation, 10-package typechecks, and 342 tests passed.
• Security regressions were reproduced against the unfixed fork with dummy credentials and mocked services; the candidate blocks them.
• No live data, project-brief branch, or application installation was changed. Receiving-Mac and packaged-app acceptance remain pending.

Backports: pingdotgg#26176, pingdotgg#20145, pingdotgg#25675, pingdotgg#26715.

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	5.0 KiB	5.0 KiB	−7 B (−0.1%)	6.8 KiB	✅
Codex	Thread snapshot wire	3.8 KiB	3.8 KiB	0 B (0.0%)	4.9 KiB	✅
Codex	Live turn WebSocket wire	1.2 KiB	1.2 KiB	−7 B (−0.6%)	2.0 KiB	✅
Codex	Live turn WebSocket decoded	20.9 KiB	20.9 KiB	0 B (0.0%)	29.3 KiB	✅
Codex	Live turn messages	2	2	0 (0.0%)	8	✅
Claude	Total thread wire	5.0 KiB	5.0 KiB	0 B (0.0%)	6.8 KiB	✅
Claude	Thread snapshot wire	3.8 KiB	3.8 KiB	0 B (0.0%)	4.9 KiB	✅
Claude	Live turn WebSocket wire	1.2 KiB	1.2 KiB	0 B (0.0%)	2.0 KiB	✅
Claude	Live turn WebSocket decoded	21.2 KiB	21.2 KiB	0 B (0.0%)	29.3 KiB	✅
Claude	Live turn messages	2	2	0 (0.0%)	8	✅

Baseline: 5aae6dc · PR result: 0b2f64f · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 108.5 KiB
• Claude decoded thread snapshot: 108.8 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.