[sudoHG]

Part of #252

Summary

Set the shared product version to 0.5.0 and replace Unreleased with the release notes for group timed allowances, End Timed Allow on Lock and reminder routing.
Update both READMEs with group scope, the default-off setting, and the exact 0.4.0 downgrade/Resume behavior; point ADR 0002's main decision to its group amendment.
Extend the maintainer's pre-release checklist with upgrade preservation, bilingual group cards, authenticated settings changes, notification routing, lock/sleep/user-switch behavior, responsiveness and empty states.

Diff stat

Base: 5cf9bc3038981cdc82baec3f6fcc3a64157f7119.
Head: aad996641055b16e46765a4180d42404f45f7c96 (review round 1).
Six files changed, 51 insertions and 23 deletions: AskKeyVersion.swift, CHANGELOG.md, both READMEs, ADR 0002 and docs/testing.md.

Tests

• PASS: swift build.
• PASS: swift test --filter 'HelperMCPConnectionTests|ReviewMCPHelperContractTests|TimedAllowanceLockPolicyTests': 17 passed, 0 failed, 0 skipped (Broker 4, Integrations 2, Vault 11).
• PASS: python3 -B -m unittest discover -s Tests/Automation -p test_product_version.py -v: 5 passed.
• No tests added, removed or weakened. The baseline was inspected, not rerun locally; the sole runtime change is the product version. Full-suite and desktop acceptance come from final-head CI.
• Review round 1 removes one CHANGELOG implementation-detail bullet only. Local Swift build/tests were not repeated for this prose-only change; hygiene, module and diff checks passed again.
• PASS: final-head CI 41558144761, with all three jobs successful on the exact head above: build-and-test, basic-ui-flows and release-sdk-window-check.
• CI Swift: 1,615 executed, 1,612 passed, 3 skipped, 0 failed; Automation: 207 passed. Counts match the exact-base push CI 41553880592, with no test changes.
• Required desktop gate: 15 passed, 0 failed, 0 skipped. Optional screenshot capture: PASS, 19 window screenshots exported. Release-SDK visible-window lifecycle: 1 passed, 0 failed.

Checks

• PASS: python3 scripts/check_hygiene.py (all seven violation counts zero), python3 scripts/check_module_deps.py, and git diff --check.
• Verified the release claims against merged PRs Open approval reminders without unlocking management #245 (c4cc6db), End timed allowances on screen lock or sleep when enabled #244 (fe7d08c), Add one timed read allowance for a credential group #246 (6b7eca0), Harden timed allowance sleep tracking coverage #249 (774fd37) and Move timed allowance lock handling off the main thread #250 (5cf9bc3), then checked notification navigation, group snapshots/Details/list/inspector/revocation, session fencing, policy encoding/authentication and SECURITY.md in the current code.
• Checked 0.4.0 policy authentication and Resume against the tagged source: false omits the new field and preserves authenticated bytes; true adds it, which 0.4.0 cannot verify. Its recovery Resume restores defaults. No library migration was added in this range.
• Simplified Chinese labels match Localizable.xcstrings: 允许本次, 详细信息, 限时允许, 锁屏时结束限时允许, 撤销分组限时允许, 恢复 Agent 访问 and 系统验证.
• Every build/test disk preflight exceeded 80 GiB. Removed the task .build (1,133,404 KiB, about 1.08 GiB) and consumed local/CI logs after reading. About 231 GiB remains available; no task build/test process remains. The unrelated idle system testmanagerd was left untouched; XCTestDevices is empty.

Deviations and questions

Step 1 only. The parallel #251 fix is tracked by #253; its UI files are untouched here, and the release tag remains blocked on that fix and this PR being merged plus successful push-to-main CI.
Local desktop E2E is NOT_RUN; real Touch ID, device lock/sleep, notifications, release installation and clients are NOT_VERIFIED and reserved for the approved device-check step.
No app launch, local screen capture, production data/Keychain access, release build, tag, installation, notarization or publication was performed. The maintainer's approval is required before merge and each later gated step.

[luoji-bot]

Review round 1: one change (coordinator review of 6857a11)

The CHANGELOG, both READMEs, ADR 0002 and docs/testing.md match the merged PRs and the app's English and Simplified Chinese labels (Allow Once / 允许本次, End Timed Allow on Lock / 锁屏时结束限时允许, Revoke Group Allowance / 撤销分组限时允许, Resume Agent Access / 恢复 Agent 访问). One change:

• CHANGELOG 0.5.0 → Fixed, second bullet ("Lock, sleep and user-switch handling runs Vault and Keychain work off the main thread…"): 0.4.0 had no lock or sleep handling, so this is not a fix users can observe; it describes how the new setting is implemented (#250). Remove it. The refusal during queued session-ending events is already covered by the Security bullet's "New timed grants are refused while locked, asleep or switched out".

If publication slips past 2026-11-03, update the 0.5.0 date before tagging.

[wangmiao-bot]

Addressed review round 1 in aad9966: removed the second Fixed bullet from the 0.5.0 CHANGELOG entry. The new-setting security boundary remains in Security; the release date remains 2026-11-03 and must be updated before tagging if publication slips.

Hygiene, module and diff checks pass. The earlier local build and 17 filtered Swift tests remain applicable to the unchanged code; final-head CI is pending, and the PR receipt has been updated.