v1.2.4

The same-day hardening cut, straight from the founder's first live walk of the War Room and the pilot-day fires. The company model grows its data spine (cross-project sprints, the aggregated company board seam, assignee-across-projects, fail-closed company-role RLS), the Linux desktop app renders again (the AppImage's WebKit hook was never sourced at runtime), macOS artifacts gain a smoke gate so a dead binary can never stage green, and the cockpit gets calmer and more honest: the background-agents band lives in exactly one place with the composer always reachable, the War Room fills its gaps (docs hotkey healed, the epic tier renders, a Reviewing filter, an honest health-band legend), and the merge dialog explains the real reason it refused.

Added

• Company data spine: cross-project sprints (#4512), company board aggregation seam (#4514), assignee-across-projects read (#4513), company-role RLS fail-closed (#4520).
• macOS artifact smoke gate + vnode-safe binary replacement — a staged mac binary must provably run before it can ship (#4564).
• War Room completeness: docs hotkey healed + docs-presence glyph, epic tier on live boards, Reviewing lane filter, health-band legend, breadcrumb named correctly (#4570).

Fixed

• Linux AppImage white screen: the generated AppRun never sourced the WebKit exec-path hook; every apprun hook is now guaranteed to execute, with a runtime smoke assertion (#4554).
• Background-agents band rendered in both cockpit columns and could push the composer out of mouse reach — one home below Workers, count chip on the rail, honest overflow (#4567).
• Merge-failed dialog derives its guidance from the actual refusal class — no more canned "wait for CI" on CI-free lanes (#4568).