From d8927de67120874456f3cff701cbb83b60dee2d5 Mon Sep 17 00:00:00 2001
From: Sam & Claude <samo.blatnik@gmail.com>
Date: Sat, 20 Jun 2026 21:52:52 +0200
Subject: [PATCH] release: bump Clawdie version to 0.11.0 (unify clawdie-iso +
 colibri)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- build.cfg: ISO_VERSION 0.10.0 -> 0.11.0; reword the version note — clawdie-iso
  and colibri now share one unified Clawdie release version (zot/clawdie-ai stay
  provenance in build-manifest.json).
- CHANGELOG: [0.11.0] entry (date in EU format DD.mon.YYYY per AGENTS rule)
  covering the versioning unify, operator-session hardening, poudriere
  build-server scripts, and the duplicate-port retirement.

colibri Cargo.toml + port DISTVERSION bump to 0.11.0 lands in the colibri repo
(separate branch). Tags held until both bumps merge.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 CHANGELOG.md | 26 ++++++++++++++++++++++++++
 build.cfg    | 10 +++++-----
 2 files changed, 31 insertions(+), 5 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2fd61065..7e3ea93c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,32 @@ _Nothing yet._
 
 ---
 
+## [0.11.0] — 20.jun.2026
+
+### Versioning
+
+- Unify the Clawdie release version across **clawdie-iso and colibri** at `0.11.0`.
+  This supersedes the 0.10.0 decoupling for these two components, which always
+  ship together. zot and clawdie-ai keep their own versions, recorded as
+  provenance in `build-manifest.json`.
+
+### Changed
+
+- Live operator-session scripts hardened: identity wallpaper off host-global
+  `/tmp` with multi-monitor apply; Join Hive captures the generator's output
+  path; vault fetch work dir moved to a `0700` runtime dir; scratch/tmp policy
+  documented in `AGENTS.md`.
+- Added first-party poudriere build-server scripts (`scripts/poudriere/`) and
+  retargeted `docs/POUDRIERE-BUILD-SERVER.md` to the `mother-build` host and
+  `pkg.clawdie.si`.
+
+### Removed
+
+- Duplicate `sysutils/colibri` FreeBSD port; the colibri repo is the single
+  source of truth. `build.sh`'s release gate fails if it reappears here.
+
+---
+
 ## [0.10.0] — 2026-06-15
 
 **Codename:** Operator Image
diff --git a/build.cfg b/build.cfg
index 972aa727..82c20015 100644
--- a/build.cfg
+++ b/build.cfg
@@ -9,11 +9,11 @@ FREEBSD_ISO_BASE_URL="https://download.freebsd.org/releases/${FREEBSD_ARCH}/${FR
 FREEBSD_MEMSTICK_URL="${FREEBSD_ISO_BASE_URL}/FreeBSD-${FREEBSD_VERSION}-${FREEBSD_ARCH}-memstick.img"
 FREEBSD_MEMSTICK_SHA256_URL="${FREEBSD_ISO_BASE_URL}/CHECKSUM.SHA256-FreeBSD-${FREEBSD_VERSION}-${FREEBSD_ARCH}"
 
-# ISO version metadata.
-# The ISO carries its own product version — it does NOT borrow a component's
-# number. Component versions (zot, colibri, clawdie-ai, clawdie-iso) are recorded
-# as provenance in build-manifest.json. Bump this for each milestone image.
-ISO_VERSION="${ISO_VERSION:-0.10.0}"
+# Clawdie release version.
+# clawdie-iso and colibri share this unified version (keep colibri's Cargo.toml
+# in sync). zot and clawdie-ai keep their own versions, recorded as provenance in
+# build-manifest.json. Bump this for each release.
+ISO_VERSION="${ISO_VERSION:-0.11.0}"
 BUILD_CHANNEL="${BUILD_CHANNEL:-dev}"  # dev | release
 
 # Output image