[ticket-008] docs(governance): complete Goal 2.1.293 delivery evidence

TODO.md

@@ -22,9 +22,9 @@
 - [x] [`ticket-007`](project/ticket-007/README.md) — execute the freshly built
   wheel CLI with published dependencies in an isolated environment. State:
   `DONE`; classification: `SERVICE / health`.
-- [ ] [`ticket-008`](project/ticket-008/README.md) — require published Goal
+- [x] [`ticket-008`](project/ticket-008/README.md) — require published Goal
   2.1.293 across canonical development metadata and the uv lockfile. State:
-  `IN_PROGRESS`; classification: `SERVICE / integration`.
+  `DONE`; classification: `SERVICE / integration`.
 
 <!-- PREFACT:BEGIN — generated block, edits inside will be overwritten -->
 # TODO

project/ticket-008/README.md

@@ -2,8 +2,8 @@
 
 - **ID**: ticket-008
 - **Owner**: unresolved:human
-- **Status**: IN_PROGRESS
-- **Workflow state**: VALIDATION
+- **Status**: DONE
+- **Workflow state**: DONE
 - **Created**: 2026-08-10
 - **Work classification**: `SERVICE / integration`
 
@@ -23,7 +23,7 @@ registry-aware version state proves that a new release is required.
 - [x] AC-03: `uv.lock` resolves the public Goal 2.1.293 artifact and remains
   frozen/current.
 - [x] AC-04: Dependency-focused tests and repository governance pass.
-- [ ] AC-05: Goal makes a registry-aware Koru version decision and creates a
+- [x] AC-05: Goal makes a registry-aware Koru version decision and creates a
   pull request whose exact head passes hosted and validator gates before
   merge.
 
@@ -49,6 +49,17 @@ ticket index are updated only for this ticket.
 - Goal registry comparison preserves Koru 0.1.460 with a `no-release`
   decision; no artificial application-version bump is required.
 
+## Delivery evidence
+
+- Pull request: `semcod/koru#28`.
+- Approved exact head: `ef673a4a0df23aafb542d904ca98acbe07f7cace`.
+- Hosted smoke run: `31436115837`; PASS.
+- Validator run: `31436230404`; approval identity:
+  `ifuri-validator-agent[bot]`.
+- Merge commit: `e0cfec0bc10c7f0240857ef69ea66d76e47bb5ba`.
+- No Koru release was created because Goal selected `no-release` and retained
+  the already-public 0.1.460 version.
+
 ## Session authorization
 
 The user authorized autonomous execution and publication in this session on

project/ticket-008/ai-codex-logs.txt

@@ -9,3 +9,6 @@
 2026-08-10 DoQL validation: 0 errors, 2 pre-existing compatibility warnings
 2026-08-10 Docker smoke: production image PASS; offline koru 0.1.460 / goal 2.1.293
 2026-08-10 version decision: Goal preserves public Koru 0.1.460 (no-release)
+2026-08-10 hosted smoke: run 31436115837 PASS on exact head ef673a4a0df2
+2026-08-10 validator: run 31436230404 approved exact head as ifuri-validator-agent[bot]
+2026-08-10 delivery: PR #28 merged as e0cfec0bc10c; no release required

project/ticket-008/ai-codex.md

@@ -32,6 +32,8 @@ unchanged.
 - Confirmed through Goal's registry comparison that Koru 0.1.460 remains the
   correct version and no release bump is needed for this toolchain-only
   change.
+- Delivered PR #28 only after hosted smoke and the dedicated validator bot
+  approved its exact head, then merged it as `e0cfec0bc10c`.
 
 ## Blockers
 

project/ticket-008/changelog.md

@@ -14,3 +14,5 @@
   entered `VALIDATION` for exact-head hosted delivery.
 - Preserved Koru 0.1.460 after Goal selected `no-release` for this
   development-tool-only change.
+- Passed hosted smoke and dedicated exact-head validator approval, merged PR
+  #28 and completed the ticket without publishing an unchanged Koru version.