VCO Release v3.2.0

• Date: 2026-07-08
• Commit(base): 7c6ac63

Highlights

• Rebuilt the default blocking regression lane around capability seams instead of keeping the old gate pile: install lifecycle, runtime entry truth, routing mainline, and one focused host-boundary smoke.
• Split the legacy routing matrix into no-local-candidate, local-owner, and requested-skill audits, while keeping the old wrapper entrypoint for compatibility callers.
• Split the legacy offline skills gate into required-skills, lock-parity, and hash audits, and moved StrictOffline onto the required-skills seam so missing skills-lock.json no longer creates a fake default blocker.
• Refreshed release metadata, package versions, dist manifests, and public asset naming to the 3.2.0 line.

Validation Notes

• py -3 -m pytest tests/runtime_neutral/test_offline_skills_gate.py tests/runtime_neutral/test_python_validation_contract.py tests/runtime_neutral/test_test_baseline_audit.py tests/integration/test_cli_main_infra_separation.py -q -> 58 passed
• py -3 -m pytest tests/unit/test_vgo_cli_install_gates.py tests/runtime_neutral/test_offline_skills_gate.py -q -> 8 passed
• pwsh -NoProfile -ExecutionPolicy Bypass -File .\scripts\verify\vibe-routing-no-local-candidate-audit.ps1 -> passed
• pwsh -NoProfile -ExecutionPolicy Bypass -File .\scripts\verify\vibe-routing-local-owner-audit.ps1 -> passed
• pwsh -NoProfile -ExecutionPolicy Bypass -File .\scripts\verify\vibe-routing-requested-skill-audit.ps1 -> passed
• pwsh -NoProfile -ExecutionPolicy Bypass -File .\scripts\verify\vibe-pack-regression-matrix.ps1 -> passed
• pwsh -NoProfile -ExecutionPolicy Bypass -File .\scripts\verify\vibe-offline-required-skills-audit.ps1 -> passed
• pwsh -NoProfile -ExecutionPolicy Bypass -File .\scripts\verify\vibe-offline-skills-gate.ps1 -> passed, with lock and hash suites explicitly skipped when config/skills-lock.json is absent

Migration Notes

• Default CI no longer treats the old routing matrix or the old offline monolith as blocking regression lanes. Use the optional audit workflow or the direct seam scripts when you want those checks on purpose.
• StrictOffline now proves required skill presence by default. Lock parity and hash parity remain explicit audits and require a generated skills-lock.json.
• The public release bundle naming now follows vibe-skills-3.2.0-public.zip.