[flexdinesh]

• Behavior owner and resulting change: mise.toml toolchain and task config.
  • mise.lock (linux-x64, macos-arm64) records checksums for go, node, pnpm, goreleaser, gh. mise-action installs with --locked automatically.
  • min_version = "2026.8.6" matches the CI pin. GOTOOLCHAIN=local stops Go from silently downloading a toolchain past the mise pin.
  • web:build, web:stage, build, plugins:build declare sources/outputs with content-hash freshness. Repeat check/pre-push runs skip unchanged builds; mise run --force rebuilds.
  • New deps task replaces raw pnpm install --frozen-lockfile in setup and in all 3 workflow steps.
  • Release file tasks pin gh (aqua:cli/cli@2.103.0) instead of relying on the runner's copy.
  • Removes the 35 MB diffx binary committed in refactor: move manual sync recovery into submission #91; /diffx is now ignored.
• Contracts/invariants affected; local/remote implications: new test/contracts/toolchain.test.ts checks that the Dockerfile golang: tag matches the mise Go pin, and that every mise-action version: and the docs requirement match min_version. Runs locally via test:contracts:rules. No app behavior change.
• Validation results; remaining risks:
  • mise run check passed; pre-push check:push passed.
  • Clean-data-dir mise install --locked installs all tools.
  • Builds skip when fresh. touch doesn't rebuild; a content change rebuilds web, stage and CLI in order. Staged assets match apps/web/dist. No generated drift.
  • Guard test fails on Dockerfile or CI version drift.
  • Risk: a source path missing from a task's globs can leave a stale local build. CI always builds fresh.
  • Linux arm64, macOS x64 and Windows have no lock entries; add them with mise lock --platform.
  • mise warns the lockfile uses format version 0 (mise lock --upgrade available); left as is.
• Intentional architecture/design changes and rationale: mise owns dependency install and every tool pin, so pins can't drift between CI, Docker and docs. Documented in docs/development.md.
• UI evidence: n/a.