chore(release): prepare v0.46.0 beta-58

crates/registry-discovery-client/tests/compatibility_metadata.rs

@@ -23,8 +23,8 @@ fn unified_sdk_metadata_names_the_tested_discovery_patch_line_and_proof() {
             },
             "namespaces": {
                 "discovery": {
-                    "testedServerBaseline": "0.45.0",
-                    "compatibleServerPatchLine": "0.45.x",
+                    "testedServerBaseline": "0.46.0",
+                    "compatibleServerPatchLine": "0.46.x",
                     "responseCompatibility": {
                         "additiveObjectMembers": "ignored-after-duplicate-key-rejection",
                         "unknownProblemCodes": "http-status-only",

crates/registry-stack-client-node/compatibility.json

@@ -6,8 +6,8 @@
   },
   "namespaces": {
     "discovery": {
-      "testedServerBaseline": "0.45.0",
-      "compatibleServerPatchLine": "0.45.x",
+      "testedServerBaseline": "0.46.0",
+      "compatibleServerPatchLine": "0.46.x",
       "responseCompatibility": {
         "additiveObjectMembers": "ignored-after-duplicate-key-rejection",
         "unknownProblemCodes": "http-status-only",

crates/registry-stack-client/compatibility.json

@@ -6,8 +6,8 @@
   },
   "namespaces": {
     "discovery": {
-      "testedServerBaseline": "0.45.0",
-      "compatibleServerPatchLine": "0.45.x",
+      "testedServerBaseline": "0.46.0",
+      "compatibleServerPatchLine": "0.46.x",
       "responseCompatibility": {
         "additiveObjectMembers": "ignored-after-duplicate-key-rejection",
         "unknownProblemCodes": "http-status-only",

docs/site/src/content/docs/changelog.mdx

@@ -18,6 +18,8 @@ relevant product pages on this site rather than duplicating release notes.
 
 ## Unreleased
 
+## v0.46.0 beta-58
+
 - BREAKING: Evidence records a source 409 or 422 as a status answer. The request log and audit
   `safeErrorCategory` read `source-status` instead of `source-protocol`; the caller still
   receives `source.unavailable`. Another 4xx, such as 400 or 415, stays `source-protocol` and

docs/site/src/data/archive-lock.yaml

@@ -190,3 +190,7 @@ archives:
     bundle_sha256: d9ff2ce15b7e7df37b167918e524b56aef03ccb06ba0923c594d606c24e52755
     root_tree_sha256: 08052e7bc324fb0de469a6ef3c784bd3eaaafd7c0a77f917769ec243d90373ed
     version_tree_sha256: 7e1e9074db16a44946a1b215f8befaa84a39af0aaa8d5c2482bdf60420961452
+  v0.46.0:
+    bundle_sha256: ed92d3585d0c927a1b0a3f41051825d2f56b80fb050635295835e55b1b070aba
+    root_tree_sha256: 923e0a9b8cc34035eaf0b0602e3fbeac6a97b520c157b1188f4e501bbb55cd33
+    version_tree_sha256: 563326ae903409557e8dfa25be53eadce90c5abae319f6c42baee86d71b6d515

docs/site/src/data/docsets.yaml

@@ -44,6 +44,46 @@ docsets:
       registry-documents:
         version: main source (unreleased)
         ref: HEAD
+  - id: v0.46.0
+    label: v0.46.0
+    path: /v/0.46.0/
+    status: archived
+    availability: candidate
+    source: registry-stack-v0.46.0
+    repo_docs_source: monorepo
+    published_at: 2026-11-08
+    description: Registry Stack v0.46.0 beta-58 candidate documentation set.
+    products:
+      registry-stack:
+        version: v0.46.0
+        ref: v0.46.0
+      registry-discovery:
+        version: v0.46.0
+        ref: v0.46.0
+      registry-manifest:
+        version: v0.46.0
+        ref: v0.46.0
+      registry-evidence:
+        version: v0.46.0
+        ref: v0.46.0
+      registry-casework:
+        version: v0.46.0
+        ref: v0.46.0
+      registry-scheduling:
+        version: v0.46.0
+        ref: v0.46.0
+      registry-render:
+        version: v0.46.0
+        ref: v0.46.0
+      registry-messaging:
+        version: v0.46.0
+        ref: v0.46.0
+      registry-breg-services:
+        version: v0.46.0
+        ref: v0.46.0
+      registry-coordinator:
+        version: v0.46.0
+        ref: v0.46.0
   - id: v0.45.0
     label: v0.45.0
     path: /v/0.45.0/

docs/site/src/data/repo-docs.yaml

@@ -143,6 +143,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: [ dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, json-schema, json-ld, odrl ]
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: [ dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, json-schema, json-ld, odrl ]
+            last_reviewed: unreviewed
         description: Operator and integrator documentation for Registry Manifest.
       - src: products/manifest/docs/validate-and-render.md
         archive_src: docs/validate-and-render.md
@@ -210,6 +213,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: [ dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, odrl ]
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: [ dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, odrl ]
+            last_reviewed: unreviewed
       - src: products/manifest/docs/profile-fixtures.md
         archive_src: docs/profile-fixtures.md
         dest: products/registry-manifest/profile-fixtures
@@ -273,6 +279,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: [ sp-dci ]
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: [ sp-dci ]
+            last_reviewed: unreviewed
       - src: products/manifest/docs/reference.md
         archive_src: docs/reference.md
         dest: products/registry-manifest/reference
@@ -339,6 +348,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: [ dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, cccev, odrl, w3c-did ]
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: [ dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, cccev, odrl, w3c-did ]
+            last_reviewed: unreviewed
       - src: products/manifest/docs/itb-semic-validation.md
         dest: products/registry-manifest/itb-semic-validation
         label: ITB and SEMIC validation
@@ -402,6 +414,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: [ dcat, bregdcat-ap, shacl, skos, json-schema, json-ld ]
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: [ dcat, bregdcat-ap, shacl, skos, json-schema, json-ld ]
+            last_reviewed: unreviewed
   registry-evidence:
     label: Evidence
     remote: https://github.com/registrystack/registry-stack
@@ -473,6 +488,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: [ openapi, json-schema, sd-jwt-vc ]
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: [ openapi, json-schema, sd-jwt-vc ]
+            last_reviewed: unreviewed
         description: Operator and integrator documentation for Registry Evidence, the minimum-disclosure assertion service.
       - src: products/evidence/CONCEPT.md
         dest: products/registry-evidence/concept
@@ -537,6 +555,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: [ cccev, json-schema, openapi, sd-jwt-vc ]
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: [ cccev, json-schema, openapi, sd-jwt-vc ]
+            last_reviewed: unreviewed
         description: Approved Version 1 product concept covering the boundary, data model, trust and privacy invariants, native API, and acceptance set.
       - src: products/evidence/reference/authoring-projects/CONFIG.md
         dest: products/registry-evidence/authoring-form
@@ -601,6 +622,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: [ json-schema, openapi, sd-jwt-vc ]
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: [ json-schema, openapi, sd-jwt-vc ]
+            last_reviewed: unreviewed
         description: Complete reference for the editable Evidence authoring project, its validation layers, local key material, and access policies.
       - src: products/evidence/reference/authoring-projects/SOURCE-EXPORT.md
         dest: products/registry-evidence/source-exports
@@ -665,6 +689,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: []
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: []
+            last_reviewed: unreviewed
         description: Optional native source import, customized updates, provenance and interrupted transaction recovery.
       - src: products/evidence/reference/request-adapter/deployment-projects/SOURCE-CREDENTIAL-ROTATION.md
         dest: products/registry-evidence/source-credential-rotation
@@ -729,6 +756,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: []
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: []
+            last_reviewed: unreviewed
         description: Rotate source credentials with explicit overlap, bounded OAuth caches and verified restart.
       - src: products/evidence/FIRST-CURL-TEST.md
         dest: products/registry-evidence/first-curl-test
@@ -793,6 +823,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: []
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: []
+            last_reviewed: unreviewed
         description: Deterministic local curl checkpoint against the Registry Evidence server with a mock source and an in-memory test JWKS.
       - src: products/evidence/SOURCE-TESTING.md
         dest: products/registry-evidence/source-testing
@@ -857,6 +890,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: [ sd-jwt-vc ]
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: [ sd-jwt-vc ]
+            last_reviewed: unreviewed
         description: Source-testing contract with the deterministic mock matrix, opt-in public demo smoke tests, and credential handling rules.
       - src: products/evidence/SD-JWT-VC-DEMO.md
         dest: products/registry-evidence/sd-jwt-vc-demo
@@ -921,6 +957,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: [ sd-jwt-vc ]
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: [ sd-jwt-vc ]
+            last_reviewed: unreviewed
         description: Deterministic local demo that issues one assertion in both later-verifiable formats and re-verifies the credential offline.
       - src: products/evidence/OPERATOR-CONTRACT.md
         dest: products/registry-evidence/operator-contract
@@ -985,6 +1024,9 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: [ openapi, sd-jwt-vc ]
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: [ openapi, sd-jwt-vc ]
+            last_reviewed: unreviewed
         description: Supported deployment shape, requester authority and purpose duties, required configuration and secrets, and readiness, audit, and key obligations.
       - src: products/evidence/PERFORMANCE.md
         dest: products/registry-evidence/performance
@@ -1049,4 +1091,7 @@ repos:
           - docsets: [ v0.45.0 ]
             standards_referenced: []
             last_reviewed: unreviewed
+          - docsets: [ v0.46.0 ]
+            standards_referenced: []
+            last_reviewed: unreviewed
         description: Measured baseline of the audit-durability throughput trade and the deferred work that would recover most of the cost.

products/adapter/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.46.0 - 2026-11-08
+
 - A host protocol's verified response can carry one opaque attachment
   (`VerifiedHostProtocolResponse::with_attachment`) that the engine hands to
   the embedding Evidence host without reading it; the engine stays free of
@@ -255,8 +257,9 @@
   text and no change in behavior.
 - Continuation cursors are sealed and opened through the shared XChaCha20-Poly1305
   primitive in `registry-platform-crypto`. The wire format is unchanged (golden
-  tokens pin it), so a cursor issued before the upgrade still opens, including
-  under the previous key after a rotation.
+  tokens pin it), including under the previous key after a rotation; cursors
+  issued before the upgrade are still refused because of the client binding
+  described above.
 - A pending direct BReg delivery is now fenced before it is retried: the job
   freezes the BReg binding, base URL, token endpoint, caller, TLS trust
   profile, access profile, Action and mode, and the mapped operation, and a retry that differs stops the pass before any

products/breg/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.46.0 - 2026-11-08
+
 - A `record_timer.worker.iteration_failed` warning carries a closed `error`
   field naming the failure class: PostgreSQL or another runtime dependency
   was unavailable, a concurrent change conflicted with this timer step, the

products/casework/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.46.0 - 2026-11-08
+
 - Each access profile may carry an optional `label` and `description`. Neither is matched against a caller, a profile that writes neither reads as before, and rewording them leaves a policy's behavioral binding unchanged. Casework keeps both in the review policy description, which any caller who may read that description, requesters included, can see.
 
 - BREAKING: This release does not read review state stored by 0.45.0 or earlier. A stored review policy that still names `role` on an access profile is refused with a message that says it was stored by an earlier release and names the member, and Casework history stored before the upgrade is not readable after it, and decided reviews still in their result window are not either. Start Casework on a new database when upgrading from 0.45.0 or earlier: activation refuses while any stored review, in any lifecycle, holds the earlier shape.

products/coordinator/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.46.0 - 2026-11-08
+
 - BREAKING: This release does not read workflow snapshots sealed by 0.45.0 or earlier: a snapshot whose project presentation, function or operation holds `title` is refused with `definition.snapshot`. A step `title` in the free-form `presentation.steps` map still restores and is shown as written. Finish open runs on the earlier release before upgrading.
 
 - BREAKING: The authored `title` of a project, function, operation and step is

products/discovery/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.46.0 - 2026-11-08
+
 - The serving binary installs its stop-signal handlers before it binds the
   listener, so a handler that cannot be installed refuses startup. If a signal
   stream later ends because the runtime's signal driver is gone, shutdown now

products/evidence/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.46.0 - 2026-11-08
+
 - Experimental public certificate check. An assertion definition may declare
   `publicCheck` (`checkCodeFact`, `statusOutput`, `fieldsOutput`) and a target
   authority may activate it with `publicCheck.definition`. Once activated,

products/manifest/CHANGELOG.md

@@ -7,6 +7,8 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 
 ## [Unreleased]
 
+## [0.46.0] - 2026-11-08
+
 ## [0.45.0] - 2026-11-03
 
 - BREAKING: `registry-manifest` adopts the shared report envelope. Machine-readable

products/manifest/docs/release-notes.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.46.0
+
 ## 0.45.0
 
 ## 0.44.0

products/messaging/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.46.0 - 2026-11-08
+
 - Each access profile may carry an optional `label` and `description`, accepted for authoring and tooling; Messaging does not serve them until a view exists. Neither is matched against a caller, and a profile that writes neither reads as before.
 
 - BREAKING: Messaging access profiles rename `role` to `actsAs`; the values are unchanged; the schema definition `AccessRole` is now `ActsAs`. Migration: in each `accessProfiles` entry, write `actsAs: VALUE` where the file wrote `role: VALUE`. A file that still writes `role` is refused with `config.removed-key` naming `actsAs`.

products/platform/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.46.0 - 2026-11-08
+
 - `registry-platform-text`: `TextStep::StripNonspacingMarksIn` replaces
   `StripCombiningMarks`. It strips General_Category Mn characters only inside
   caller-named code point ranges (1 to 64, `MAX_MARK_RANGES`; an empty, inverted

products/render/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.46.0 - 2026-11-08
+
 - The serving adapter installs its SIGTERM and Ctrl-C handlers together before
   it accepts requests. The startup error for a handler that cannot be installed
   now reads "cannot install the stop signal handlers", and a Ctrl-C handler that

products/scheduling/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.46.0 - 2026-11-08
+
 - A holiday set's `label` is optional, as in the Casework holiday-set file; the id names a set that writes none.
 
 - BREAKING: This release does not read state stored by 0.45.0 or earlier. A stored policy that still holds `holidaySets[*].because` is refused with a message that says it was stored by an earlier release and names the member. Put Scheduling on a new database.