# Forge 4.0.0 RC.3 — corrected workspace discovery

Ephemeral sessions. Permanent engineers.

This corrected matched release contains Anvil, Hammer and Connect 4.0.0. Build identity: Forge-4.0.0-RC.3. It replaces the earlier RC.2 payload. The product/file version remains 4.0.0 / 4.0.0.0: identify the corrected packages by the RC.3 URLs and SHA-256 hashes, not the version label alone. Version-only update checks may not offer this correction to an existing 4.0.0 installation; download the matched RC.3 installers explicitly.

## What is corrected

Anvil performs fixed, read-only Git probes through the engineer's authenticated, approved, online assigned Spark. It records the observed repository root, working directory, branch, committed HEAD and Git version with protected execution evidence. Imported declarations and manually supplied verification flags do not establish current workspace verification. Failed or incomplete re-verification and assignment changes invalidate the current verification while retaining historical evidence.

## Upgrade and use

Back up the complete Anvil data directory, database and encrypted Secrets, and retain the matching certificate/private-key recovery material and previous binaries. Update the matched Anvil server before Hammer and Connect. Do not assume compatibility with an older Anvil memory API.

The initial supported discovery path requires an approved, online assigned Spark, Git on its PATH, read access to the assigned workspace, and a real Git repository with a committed HEAD. Non-Git repositories and repositories without a committed HEAD are not supported by this discovery path. This verifies the assigned workspace; it does not certify secondary repositories, dependencies, builds or deployment claims.

In Hammer, select the engineer and choose VERIFY WORKSPACE before checkout. With the corrected Connect installation, start a new Codex chat and ask Connect to verify the engineer's workspace. Reopen the engineer after successful verification. Other mandatory context and authority checks still apply.

All three downloads are signed Windows setup EXEs. Spark is not included in this release; its existing download packages remain 2.9.0.

## Controlled validation

Exact packaged controlled acceptance passed 54 workspace-discovery checks, 77 memory/authority checks and 3 fresh Hammer reconstructions. All 13,525 original historical records remained unchanged. Additional checks passed: 97 architecture tests, 23 Connect tests and 7 Anvil installer tests.

External customer acceptance has not been performed. These results do not claim live AI-provider reasoning or automated desktop UI acceptance. Verify the accompanying public SHA-256 checksums before installation.