[mberman84]

What changed

• records a durable per-thread notification obligation when an authorized pull request merges
• promotes the obligation only after the containing exact main deployment and health checks verify
• returns retryable native-thread notification payloads with stable idempotency IDs
• adds provider delivery and acknowledgement guidance for Codex, Claude Code, and Cursor adapters
• preserves notifications across thread reuse, expiry, coordinator replacement, and newer-main supersession

Safety

• generic clients cannot claim the controller-owned deployed phase
• acknowledgements are bound to provider, thread, merge generation, and notification ID
• failed native delivery remains pending; registry comments never count as user-visible delivery
• stale acknowledgements cannot complete newer work in the same thread

Validation

• 144 unit tests passed
• ruff format --check .
• ruff check .
• git diff --check
• independent autoreview: clean, no accepted/actionable findings