docs: rc9 published to the live channel, .org zip rebuilt

Refs #155

Author: ifahimreza

STATUS.md

@@ -13,11 +13,13 @@ Eight tests, **five of them the "nothing else moves" half**. Verified red first
 
 **Still unconfirmed:** which transport the tester is actually on, and their Saddle version. Their **Connection details → Transport** line answers it in one paste. The fix is right either way, and it also covers them simply being on a build older than #98.
 
-**rc9, verified inside the zip rather than the tree:** updater present (self-hosted channel), `lib/wp-mcp` 0 files, no `class-saddle-ecosystem.php`, no `tests/`/`dist/`/`*.md`/dotfiles, all four moving version sites at `1.0.0-rc9` with `Stable tag` correctly held at `1.0.0`, the #155 fix and the re-brand both present, outbound HTTP limited to the documented four (loopback, Unsplash, the updater, OAuth client metadata). 104 files, sha256 `c4e314d3…`, 663,891 bytes.
+**rc9 IS PUBLISHED AND LIVE.** `./scripts/release.sh saddle 1.0.0-rc9 …` uploaded the zip and the manifest to R2; manifest committed to `plugin-update-workers` (`fdb1dbf`). The manifest was still on **rc7** — rc8 was built and never published — so it carries both changelog entries now. Verified through the live link rather than the upload: `/v1/update` reports `1.0.0-rc9`, and the zip downloaded **from the signed package URL** is byte-identical to the local build (sha256 `c4e314d3…`, 663,891 bytes) and **contains `class-saddle-updater.php`** — a channel serving an updater-less zip silently ends updates for every install on it. `/v1/latest?slug=saddle` answers 200.
+
+**The WordPress.org zip is rebuilt and current:** `dist/saddle-1.0.0.zip`, sha256 `7fafb1fb…`, 661,136 bytes, 103 files — built from a temporary uncommitted `1.0.0` header with the tree restored to rc9 afterwards. Updater **absent** (that absence is what makes it .org-safe), no `class-saddle-ecosystem.php`, `lib/wp-mcp` 0 files, no dev files, `Stable tag` 1.0.0. Outbound HTTP is only the loopback self-check, Unsplash and OAuth client metadata — no updater call at all. Carries all of today's work: the read-authorization sweep, the notification 202 fix and the re-brand. **Plugin Check against the extracted zip staged as `saddle`: 0 errors**, 3 pre-existing warnings (one vendored-adapter hook name, two dynamic hook names in the integration engine). Handed to Fahim to upload; not submitted by me.
 
-**The WordPress.org zip was NOT rebuilt and is now stale** — the `saddle-1.0.0.zip` handed over earlier today predates the re-brand and #155. If the resubmission should carry them, it needs building again from a temporary `1.0.0` header.
+**rc9, verified inside the zip rather than the tree:** updater present (self-hosted channel), `lib/wp-mcp` 0 files, no `class-saddle-ecosystem.php`, no `tests/`/`dist/`/`*.md`/dotfiles, all four moving version sites at `1.0.0-rc9` with `Stable tag` correctly held at `1.0.0`, the #155 fix and the re-brand both present, outbound HTTP limited to the documented four (loopback, Unsplash, the updater, OAuth client metadata). 104 files, sha256 `c4e314d3…`, 663,891 bytes.
 
-**Next up:** hand rc9 to the tester, get their Transport line, and decide whether the .org resubmission zip is rebuilt before upload. [#145](https://github.com/plugpressco/saddle/issues/145) still makes green impossible on every PR.
+**Next up:** Fahim uploads `saddle-1.0.0.zip` at "Add your plugin" and sends the drafted reply; point the Codex tester at rc9 (it is live, so their site will offer it) and get their **Connection details → Transport** line. Saddle Pro has an unreleased change on its `main` — the License card — and is still tagged 1.6.0. [#145](https://github.com/plugpressco/saddle/issues/145) still makes green impossible on every PR.
 
 ## Previous session
 2026-08-25, later (**the admin UI re-branded on Saddle Violet, the rail flattened, and the Dashboard rewritten to lead with a sentence**) — Issue [#153](https://github.com/plugpressco/saddle/issues/153), PR [#154](https://github.com/plugpressco/saddle/pull/154); companion Pro PR [saddle-pro#78](https://github.com/plugpressco/saddle-pro/pull/78). **637 tests** (was 643 — the 6 are the Cookbook's), 0 lint errors both languages.