# Forge Suite 2.9.0

Forge 2.9.0 completes the daily Hammer workflow and adds a safe generated-file execution contract for Windows and Linux Sparks.

## Hammer

- Moves update controls beside the footer version so they remain visible without crowding the title bar.
- Starts Director work time automatically when GO is pressed; START, PAUSE, and STOP remain available.
- Reads the signed-in Codex account's current weekly usage and reset allowance through the local Codex service.
- Opens Development and Production targets inside an embedded Edge browser.
- Presents a site chooser when an organization has multiple configured environment targets.
- Replaces the standalone production-approval prompt with explicit APPROVE and REJECT actions on real engineer approval requests.
- Preserves compact checked-out engineer buttons and independent concurrent work sessions.

## Spark and Engineer Kernel

- Adds `WriteFile`, a hash-verified generated-file operation for scripts and structured text up to 512 KiB.
- Writes generated files atomically beneath the selected working directory and blocks path traversal or checksum mismatch.
- Keeps generated content out of command lines and audit logs while recording path, byte count, and SHA-256.
- Allows engineers such as Atlas to create resumable export scripts without shell quoting, base64 launchers, or fake attachment identifiers.
- Advertises generated-file capability on both Windows and Linux Sparks.

## Validation

- 87 automated tests pass, including generated-file success, checksum rejection, and path-escape rejection.
- Codex usage was verified against the locally signed-in Codex account.
- Hammer, Anvil, Windows Spark, and Linux Spark share the coordinated 2.9.0 contract.