[sasan1200]

Changes

• releases.json pins each released plugin to one tag and commit: mlx-agent v0.10.0 (6e6effd), obsidian-agent v0.1.0 (b0b0cf0); loop-killer has no release and stays on its default branch.
• Every host installs the pinned release: the Claude marketplace source carries ref and sha, each Agy, OpenCode, OpenClaw and Hermes install command clones the tag, and the vendored Codex packages are copied from it (mlx-agent's seven skills with the shared scripts/ and src/ runtime, obsidian-agent's 31 skills).
• Sync plugin release: on a cavi-oss-release dispatch, or a manual run with a plugin name and tag, it checks out the tag, confirms it resolves to the released commit, runs scripts/sync-release.mjs for every host, runs node --test and the catalog gate, and opens a pull request.
• The validator rejects any Claude source, discovery command or Codex package that does not match the plugin's release pin, and reads each Codex package's commit and skill inventory from expected-integrity.json.

Verification

• node --test: 32 tests pass, covering pinned commands and sources, drift from the pin, malformed pins, all-host sync, a Codex-less plugin, and input refused before any write.
• node scripts/validate-catalog.mjs passes; main's validator rejects the pinned catalog.
• git clone --branch v0.10.0 --depth 1 of mlx-agent resolves to 6e6effd, and --branch v0.1.0 of obsidian-agent to b0b0cf0.
• python3 packages/codex/mlx-agent/scripts/mlx-agent inspect-host --json runs from the vendored package and returns status: ok.