Circuit Breaker v0.4.4

Replaces the PyInstaller onefile that 0.4.3 still shipped with a hermetic python-build-standalone tree shared by the tarball, packages and mono image, adds stage/activate/rollback for upgrades, and publishes through nightly → candidate → stable channels (tag last).

Added

• Hermetic native runtime: a pinned python-build-standalone tree under /opt/circuitbreaker/ (own interpreter, wheels, launcher). Packages symlink /usr/local/bin/circuit-breaker into that tree; the mono image rebuilds from the same pins and must share runtime_digest.
• Installer stage → activate → verify → finalise, with python.prev held until /readyz succeeds; install.sh --channel stable|candidate; uninstall via install-identity on both layouts.
• Release channels: :nightly from green dev, draft candidate, and stable promote that retags the same digest (tag created last).

Fixed

• A stable promote can see the draft release it verifies. The promote-verify job ran with contents: read, and GitHub lists draft releases only to tokens with push access, so every promote failed with “has no draft to promote”.

What’s Changed

• fix(test): widen the port-check test’s deadline to remove a real-time race by @BlkLeg in #157
• feat(install): hermetic runtime (python-build-standalone), replacing PyInstaller by @BlkLeg in #159
• Trivvy Fixes by @BlkLeg in #160
• fix(release): let promote-verify see the draft it verifies by @BlkLeg in #161

Full Changelog: v0.4.3…v0.4.4