Publish curated ITWorx-ModelForge source from 990401737f96c8d46a9f7b0d84994516cadcb6a0

CHANGELOG.md

@@ -5,6 +5,41 @@ commits are not listed unless they change what an operator sees or does.
 
 ## Unreleased
 
+### Release qualification
+
+- Candidate version `1.3.0-rc.1` reports the `rc` channel rather than stable.
+- The P15A path binds the exact canonical source identity, OCI labels and filesystem layer sets
+  into a retained image bundle before isolated RC qualification.
+- This is not a release announcement: no RC tag, Gitea prerelease or production promotion is
+  authorized until the complete qualification matrix is verified.
+
+### Product workflow
+
+- Added the project-first model-management flow: persisted project bindings, human-readable model
+  and update context, guided onboarding, selected current/candidate comparison, impact and
+  migration/reindex boundaries, and explicit lifecycle verification/rollback. Projects continue
+  to bind to stable capabilities rather than model paths or concrete model names.
+- Selected comparisons now retain immutable embedding-space dimensions and exact gateway-bound
+  current/candidate evidence; approved route replacement and rollback are fenced by generation
+  and CAS checks.
+
+### Fixed
+
+- The v1.2.1 upgrade path now detects when `modelforge` is PostgreSQL's protected bootstrap
+  superuser (OID 10) before mutating any role or privilege. Such installations are routed to a
+  documented fresh-cluster logical-restore path; direct system-catalog edits remain unsupported.
+- Compose now passes the retained-admin variable names required by the bounded existing-cluster
+  provisioning script, while continuing to keep administrator and owner credentials out of the
+  API and migration processes.
+
+### Operations
+
+- Recorded the completed v1.2.2 production rollout, exact deployed image identities, role-split
+  cluster migration, verified recovery point, measured downtime and final production-worker LAB
+  probe.
+
+## v1.2.2 — 2026-09-01
+
 ### Security
 
 - Runtime Worker packaging now upgrades the digest-pinned Ubuntu base before installation and pins