Bump Codex package to 0.7.0

Author: Cipher-85

.codex/README.md

@@ -12,8 +12,8 @@ Current package version:
   explicit publish operations.
 
 Current status:
-- The package version is `v0.6.1`.
-- Post-`v0.6.1` correction completes the default `game_studios` profile with
+- The package version is `v0.7.0`.
+- `v0.7.0` completes the default `game_studios` profile with
   Git/runtime writes, `.env*` denials, and exact `github.com` access without a
   project approval-policy override. `$handoff` now preflights Git and the exact
   remote, uses scoped permission fallback only when needed, and retries once

.codex/VERSION

@@ -1 +1 @@
-0.6.1
+0.7.0

CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## v0.7.0 - 2026-07-20
+
+- Completed the default `game_studios` permission profile with writable Git and
+  Codex runtime directories, strict root and nested `.env*` denials, and network
+  access limited to `github.com` without overriding the user's approval policy.
+- Updated `$handoff` to preflight Git metadata and the exact push destination,
+  use scoped permission fallbacks only when the active session needs them, and
+  retry once only for a pre-contact DNS-resolution failure.
+- Added config and runtime validation for the complete profile and handoff
+  contract, then verified the workflow in a fresh Stillcurrent session that
+  committed and pushed without a manual permission-mode switch.
+
 ## v0.6.1 - 2026-07-16
 
 - Hardened `$handoff` push routing so existing-upstream branches use plain

README.md

@@ -4,7 +4,7 @@ Codex Game Studios turns a game repository into a Codex-native indie studio
 workflow: 49 declared role profiles, 77 repo-local skills, verification-first handoffs, and
 Godot-first production guidance for small teams building playable slices.
 
-Current package version: `0.6.1`.
+Current package version: `0.7.0`.
 
 This project is an unofficial Codex-native port of
 [Donchitos/Claude-Code-Game-Studios](https://github.com/Donchitos/Claude-Code-Game-Studios),
@@ -29,17 +29,26 @@ surfaces with Codex-native agents, skills, hooks, rules, and install behavior.
 
 ## Current Status
 
-The current release line is `v0.6.1`. It includes:
+The current release line is `v0.7.0`. It includes:
+
+- A complete default `game_studios` profile with writable Git and Codex runtime
+  directories, strict `.env*` denials, and network access limited to
+  `github.com` without a project approval-policy override.
+- Permission-mode-neutral `$handoff` routing with early Git/remote capability
+  checks, exact scoped permission fallbacks, and one safe retry only for a
+  pre-contact DNS-resolution failure.
+- Config and runtime validation for the permission and handoff contracts, plus
+  a successful fresh-session downstream handoff without manual permission-mode
+  switching.
+
+The `v0.6.1` release also includes:
 
 - Upstream-aware `$handoff` push routing: existing-upstream branches use plain
   `git push`, while only branches without an upstream set one through origin.
 - Same-turn destination verification from the configured push URL and
   branch/upstream. GitHub CLI identity checks are advisory because Git and `gh`
   can use different credentials; the authorized `git push` is the definitive
   network and Git-authentication check.
-- Permission-mode-neutral `$handoff` routing with early Git/remote capability
-  checks, exact scoped permission fallbacks, and one safe retry only for a
-  pre-contact DNS-resolution failure.
 
 The `v0.6.0` release also includes: