Release Switchloom v0.3.0 reviewed candidate

[regenrek]

Summary

Publish the reviewed Switchloom v0.3.0 migration candidate for independent review before any merge, tag, package publication, Homebrew update, or website publication.

Candidate Identity

• Branch: codex/switchloom-0.3.0-migration
• Candidate commit: e936b90c81d8f944ba50657c10ef9a2a564c53c5
• Base branch: main
• Candidate receipt: reports/release-ready-v0.3.0/candidate.json
• Candidate version: 0.3.0
• Source dirty flag in receipt: false

Receipt Hashes

• Cargo crate: target/package/model-routing-0.3.0.crate
  • SHA-256: e4b4c5975311478dfef345804c44c13a4b627d6beeb5f3be5d5f9099e5ed16eb
• npm tarball candidate: /private/tmp/switchloom-v0.3.0-candidate.hASKiy/switchloom-0.3.0.tgz
  • SHA-256: 23666bc68b3a1e892b0613733a9a843e789b4c3ae75c5106a706f17c5460f64d
  • shasum: bba3978727825c17d18661b202c6c7abcb66c234
• darwin-arm64 native binary: dist/switchloom-0.3.0/model-routing
  • SHA-256: b4dd82486d85f5b7a171cbc7b25836a99ad6c59d0fa0490acbfc18703f729c39
  • version output: model-routing 0.3.0
• darwin-arm64 archive: dist/switchloom-darwin-arm64.tar.gz
  • SHA-256: d4fabca7b0f6abb96435462519bb6ddc1005d553bfa1801e56b2f7ab7f1e141f
• Catalog: website/data/catalog.json
  • SHA-256: eb405728b7a22436f3159774ce265ddbc604e12af7f59841a9e1a3dc26f630e0

Preflight State

The release preflight fail-closed checks passed before this branch was pushed:

• HEAD, branch, clean state, package versions, and receipt source fields match the candidate.
• Local package/native/archive/catalog hashes match the candidate receipt.
• No remote v0.3.0 tag existed before push.
• No GitHub release v0.3.0 existed before push.
• Public npm listed 0.1.1, 0.2.0, 0.2.1, and 0.2.2; switchloom@0.3.0 returned E404.
• Homebrew instructa/tap/switchloom stable remained 0.2.2.
• Protected /Users/kregenrek/projects/planr baseline matched receipt HEAD/status hash.

Release Intent

This PR is the review gate for the v0.3.0 candidate. It should be reviewed findings-first and merged only after required CI is green. Later tasks own merge, tag creation, GitHub release/native assets, npm publication, Homebrew publication, switchloom.ai publication, and public-byte certification.

Limitations Preserved

• Only darwin-arm64 native/npm bytes were built locally; the four-platform native matrix remains CI-owned.
• Cursor receipts prove nonce-correlated requested routing, but the host exposes no authenticated effective model/effort telemetry.
• Claude Code remains explicitly not live verified for effective model/effort telemetry.
• This PR creation task did not merge, tag, publish npm, create a GitHub release, update Homebrew, or deploy the website.