[soulbah]

Change

Complete the Rootform 0.2.1 release request with the Engine security build pinned by #34: Engine de7c23b27fe34e9e8e2a97dd77b016078fd72421, built with Go 1.26.9 and golang.org/x/net 0.61.0.

• The changelog lists that update under ## 0.2.1 instead of Unreleased, so the 0.2.1 release notes include it.
• The Playground Forms are regenerated with that build. Only the generator digest in examples/playground/forms/manifest.json changes; every Form document is byte-identical.

Validation

• bun scripts/prepare-release.ts --check: {"engine_commit":"de7c23b27fe34e9e8e2a97dd77b016078fd72421","tag":"v0.2.1","version":"0.2.1"}.
• ROOTFORM_BIN=<rootform 0.2.1 darwin_arm64> bun run verify: distribution verification passed, including the repository check, the documentation pages, all script tests, the Playground Forms reproduced byte for byte and 115 documented command markers.
• The binary is the darwin_arm64 executable of a local Engine handoff built at de7c23b27fe3 (bun scripts/build-handoff.ts --version=0.2.1), sha256 91fa9cb519aecc239f03ca7de3f44163628eadd1e89e045e488d9dd588ff5888; rootform version prints rootform 0.2.1.
• Trivy 0.74.0 reports no vulnerability in the linux_amd64 executable of that handoff and its SBOM, and no HIGH or CRITICAL vulnerability in linux_arm64.

[rootform-contribution-delivery]

Contribution progress

Source: 019a87c67e4683fb907b30eb5dadc811d1b596fd

Selected validations: examples. Repository safety always runs.

Stage	Status
Public validations	Passed (checks)
Documentation preview	Not required for this change
Development integration	Passed
Staging sites	Passed
Release	Included in v0.2.1

Applicable consumers are synchronized on their development branches and the staging sites. Releases are published from main; the Release row follows them.