ContextLattice v3.17.4 - Trust, Delivered

The v3.17.3 runtime hardening landed cleanly, and its public installer boundary caught one dead paid-lane environment key in a test fixture before artifacts were published. This forward-only patch removes that residue, locks the boundary with a regression assertion, and sends the exact public tree through the complete installer pipeline.

What changed

• Removed an unused machine-binding test path from the public gateway fixture.
• Added a public-lane regression check that rejects paid machine-binding vocabulary in gateway source.
• Preserved every v3.17.3 runtime hardening contract unchanged.
• Advanced all product lanes together so version, documentation, installers, and commercial truth stay coherent.

What did not change

• No runtime feature or API behavior changed from v3.17.3.
• The CLI remains the primary interaction path.
• Public and paid feature boundaries remain intact.
• No third-party harness is installed automatically.
• No new daemon, scheduler, or Python live-runtime dependency was added.
• Public artifacts contain no private planning material or machine-local paths.

Verification

The release gate covers the public payload source-integrity scan, commercial-truth generation and audits, Go tests, Pi/Droid task-worker tests, public synchronization and leak guards, exact tag provenance, and complete macOS, Linux, and Windows artifact workflows.