[playing]

What changed

• prepare the first source-only v0.2.0 release and bilingual release/upgrade documentation
• make the Python 3.11/3.12 CI matrix install and import the exact runtime dependencies
• pin a NumPy version compatible with both supported Python versions
• make configuration validation strict and surface startup failures in the JSON event log
• make doctor use the effective repository config and validate runtime imports, the exact microphone format, and the current Hook path
• add the source-backed upstream risk scan; model weights remain excluded

Why

The previous CI matrix compiled source without installing runtime dependencies, so Python 3.11 appeared green even though numpy==2.5.1 required Python 3.12+. Diagnostics could also pass while ignoring config.json or a stale Hook target. This release hardening makes the published compatibility and doctor results match the actual runtime boundary.

User impact

The product boundary is unchanged: local wake word, microphone release, configured Codex Voice hotkey, and listener re-arm. Users get clearer configuration failures, more truthful diagnostics, and a reproducible source-only release.

Validation

• 22/22 local tests
• compileall and phrase artifact validation
• exact dependency install, runtime import, and pip check
• doctor and model probe
• Windows run-wake-launcher.ps1 -Check
• PowerShell and macOS shell syntax validation
• live Windows background restart and singleton verification
• tracked-asset check confirms no model or audio files