Refresh Release 2 checkpoint on current main

docs/release-plan-2026-10.md

@@ -42,7 +42,7 @@ The Release 1 ledger leaves 65 manual workflows open, including native macOS/Lin
 
 **Release 2 checkpoint (verified 2026-10-09 at main `fcf366a`; product code through PR #82, documentation through PR #81).** Subsequent product changes include the exact-Deny Auto regression, persisted sidebar reorder, profile and hosted-key fixes, and a clarification in the Auto/MCP tooltips when saved MCP permissions cannot be read. PR #77's Windows/Linux/macOS CI [#38003412218](https://github.com/jay23606/codev/actions/runs/38003412218) and post-merge CI [#38003676335](https://github.com/jay23606/codev/actions/runs/38003676335) passed. PR #79 documented the Auto/profile/MCP denial-composition review and focused test evidence in `DESIGN.md`; its Windows/Linux/macOS CI [#38004723785](https://github.com/jay23606/codev/actions/runs/38004723785) and post-merge CI [#38004977342](https://github.com/jay23606/codev/actions/runs/38004977342) passed. PR #80 refreshed the checkpoint; its main-branch Windows/Linux/macOS CI [#38005530614](https://github.com/jay23606/codev/actions/runs/38005530614) passed. PR #82 adds Streamable HTTP MCP Auto scenarios to the existing Linux/macOS packaged checks; its cross-platform PR CI [#38007296765](https://github.com/jay23606/codev/actions/runs/38007296765) and post-merge CI [#38007627029](https://github.com/jay23606/codev/actions/runs/38007627029) passed. The new packaged scenarios are not yet runtime-verified; run the one scheduled four-target preview on the frozen October 11 candidate. PR #74 added the eight-archive prepublish gate; PR #76 changed the release preview workflow to run packaged interaction checks only on manual dispatch or version-tag pushes. Their PR CI [#38001121514](https://github.com/jay23606/codev/actions/runs/38001121514) [#38002345137](https://github.com/jay23606/codev/actions/runs/38002345137) and post-merge CI [#38001372222](https://github.com/jay23606/codev/actions/runs/38001372222) [#38002651235](https://github.com/jay23606/codev/actions/runs/38002651235) passed. The last exact-head packaged preview remains PR #62 [#37991522656](https://github.com/jay23606/codev/actions/runs/37991522656). Do not run packaged previews for ordinary PRs or local desktop smokes during routine work. Clean-machine installation, physical accessibility, and native macOS/Linux interaction remain explicit limitations. Keep the October 11 freeze and October 13 Release 2 target below.
 
-**Release 2 checkpoint addendum (2026-10-09 local, main `ff3d6a5`).** PR #83 recorded the merged Linux/macOS Streamable HTTP MCP preview coverage in `DESIGN.md`; its main CI [#38008269947](https://github.com/jay23606/codev/actions/runs/38008269947) passed. PR #84 added partial MCP timeout/cancellation evidence for Q3-64 to the checklist and `DESIGN.md`; its Windows/Linux/macOS PR CI [#38010052707](https://github.com/jay23606/codev/actions/runs/38010052707) and post-merge CI [#38010269076](https://github.com/jay23606/codev/actions/runs/38010269076) passed. Release 1 remains the latest public release; no open PRs or GitHub issues were listed at this check. The Release 2 preview remains scheduled for October 11, with October 13 as the target release date.
+**Release 2 checkpoint addendum (verified 2026-10-09 20:54 ET, main `4bd71cb`, PR #85).** PR #83 recorded the merged Linux/macOS Streamable HTTP MCP preview coverage in `DESIGN.md`; its main CI [#38008269947](https://github.com/jay23606/codev/actions/runs/38008269947) passed. PR #84 added partial MCP timeout/cancellation evidence for Q3-64 to the checklist and `DESIGN.md`; its Windows/Linux/macOS PR CI [#38010052707](https://github.com/jay23606/codev/actions/runs/38010052707) and post-merge CI [#38010269076](https://github.com/jay23606/codev/actions/runs/38010269076) passed. The exact current main commit's Windows/Linux/macOS CI [#38011045113](https://github.com/jay23606/codev/actions/runs/38011045113) passed. Release 1 (`v2026.10.08-89bd54e`) remains the latest public release; no open PRs or GitHub issues were listed at this check. The Release 2 preview remains scheduled for October 11, with October 13 as the target release date.
 
 Target Release 2 for **Tuesday, October 13, 2026** (Day 5 after the October 8 publication; acceptable window: Day 3–5). On October 9–10 (Days 1–2), collect install reports, triage reproducible issues, and fix release blockers. On October 11 (Day 3), freeze the candidate and run exact-head Windows/Linux/macOS CI plus all four packaged desktop/CLI checks by manually dispatching the desktop-preview workflow once against the frozen main commit. The four-RID preview will also run the new Linux/macOS Streamable HTTP MCP Auto scenarios, which were added to the existing packaged checks without changing the preview cadence. The workflow runs only on manual dispatch and version-tag pushes; pull requests and ordinary merges use the Windows/Linux/macOS CI workflow without packaged interaction smokes. Use a local desktop smoke only if a release-critical interaction remains uncovered by hosted checks and focused tests; routine local runs stay disabled. Publish on October 12–13 only if exact-head checks pass, update the release notes for verified changes and remaining limitations, and confirm all eight README latest-download links. If a blocker moves the candidate, move Release 2 to Day 3–5 after the verified fix.