AIWG 2026.9.20 - Stable channels and exact-source evidence

AIWG 2026.9.20 is a corrective release for the stable-channel policy introduced after v2026.9.19. Stable releases now use `latest`; the legacy `next` alias is retired on npmjs.org and the Gitea package mirror.

What changed

• Stable channel: `latest` remains the stable install channel for `aiwg`,

`@aiwg/cli`, and `@aiwg/cockpit`.

• Legacy alias retirement: Gitea publication removes `next`, and release

verification requires the alias to be absent from both registries.

• Exact-source Socket evidence: Tag-bound npm publication passes the exact

release version and source commit directly to the fail-closed Socket audit. The audit no longer depends on the public mirror's divergent default-branch history.

Try it

Update with `npm install -g [email protected]`. The versioning guide describes the stable-channel policy, and the Socket post-publish audit documents the exact-source evidence flow.

The full change history is in the changelog.