release: ao-cli v0.7.0-rc.1 — composable multi-tenant platform (multi-kind + host-sharing + security trio + environment kernel)

Cut from release/0.7 off v0.6.33 + actor foundation. Crates bumped to 0.7.0-rc.1;
animus-protocol pinned v0.7.0-rc.2. RC for staged portal verification before v0.7.0 final.

Author: Shooksie

CHANGELOG.md

@@ -4,6 +4,35 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+## [0.7.0-rc.1] - 2026-07-03
+
+**v0.7.0-rc.1 — Composable, multi-tenant platform (release candidate).**
+
+Cut from `release/0.7` (off v0.6.33 + the actor foundation). Portal upgrades to
+this RC for staged verification before promoting to `v0.7.0` final.
+
+- **Multi-kind plugins** — a plugin advertises `plugin_kinds` and satisfies many
+  roles; discovery + preflight index by `serves_kind`. Protocol at
+  `animus-protocol` v0.7.0-rc.2 (single-source git-dep; the in-tree
+  `animus-plugin-protocol` copy was removed). Unblocks one Node process serving
+  subject + config + queue + journal + chat.
+- **Cross-role host-sharing** — a process-global `ResidentHostRegistry` keyed by
+  `(binary, mtime, spawn-context)`; `config_source` ⟷ `workflow_journal` collapse
+  to one process.
+- **Security hardening** — `auto` secret key source prefers real key material
+  (no locally-decryptable device-id default on servers); context-aware plugin
+  signature policy + fail-closed org TOFU in non-TTY; discovery scope-filters
+  BEFORE the `--manifest` probe (closes hostile-repo code-exec on the
+  server-safe path).
+- **Execution environment as a plugin** — new `environment` PluginKind +
+  `animus-environment-protocol` (`prepare`/`exec`/`exec_stream`/`teardown`);
+  `EnvironmentClient`, `resolve_environment` `(subject_kind × harness)` routing,
+  optional preflight role; the worktree materialization is thin-delegated to the
+  env plugin behind a gated, zero-regression fallback (`ANIMUS_ENVIRONMENT_DELEGATE`).
+- Carries all v0.6.33 reliability fixes (plugin-handshake stderr capture +
+  transient respawn retry) and the full per-user actor foundation (scoped config,
+  owner-scoped schedules, isolated MCP).
+
 ## [0.6.11] - 2026-06-24
 
 **v0.6.11 — `animus update` defers to avm.**

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "orchestrator-cli"
-version = "0.6.33"
+version = "0.7.0-rc.1"
 edition = "2021"
 license = "Elastic-2.0"
 default-run = "animus"