# v0.13.3

**Status:** Pre-release. Final release metadata is recorded in `docs/releases/facts.json`.

Internal Diagnostic Path Readiness release. No public API change. No wire-format change. No new public package. No publish-manifest change.

## Summary

Documentation and internal test-infrastructure release. No public API change. No wire-format change. No OpenAPI change. The release publishes to npm `next` only and ships as a GitHub prerelease; no `latest` promotion.

## Highlights

- **Operator runbook for the internal rollback-path flag.** New runbook at `docs/diagnostics/ROLLBACK-PATH.md` explains what the flag does today, how to set it, how to verify both flag values, and how to remove the setting. Both flag values currently use the same protocol path.
- **Resource-limit surface contracts clarified.** `docs/specs/RESOURCE-LIMITS.md` gains a Layered network limits subsection (verifier-bearing paths pass explicit `timeoutMs` and `maxBytes` that override `@peac/net-node` defaults of 30,000 ms / 2 MiB), a Timeout classes subsection (5,000 ms verifier / 10,000 ms issuer-config / 30,000 ms unrestricted), and a Header-carrier surfaces clarification.
- **Stale documentation citations corrected.** Resource-limit table citations now point at the canonical kernel constants; references to a retired package are replaced with current source paths.

## Compatibility

- Public API signatures unchanged. Wire format unchanged. OpenAPI verify contract unchanged. The rollback-path flag is behavior-preserving in this release.
- Active publish-manifest count: 36 (unchanged from v0.13.2).
- Workspace-private packages remain workspace-private; absent from `pnpm publish --dry-run --recursive`.
- No new emitted error code on primary paths. No new public extension key. No new typ.

## Release posture

- npm dist-tag: `next` only. **No `latest` promotion in this release.**
- GitHub Release: prerelease, authored manually under the maintainer GitHub account.
- Strict closeout: `verify:release-closeout --stage publish` (publish stage only; no promote stage).
- Workspace-private packages are not published; they remain workspace-only and never appear on npm.

## Migration

No migration is required. Every public symbol from v0.13.2 continues to behave identically.

## Verification

```bash
pnpm install
pnpm build
pnpm test
pnpm verify:release
node scripts/verify-no-semantic-widening.mjs
node scripts/verify-dist-private-leaks.mjs
```

All gates green on the merge commit.
