Add the iteration request shape and release 4.4.0

[mzored]

Summary

• The kernel gains one request shape, the iteration: a change to something the owner will look at before deciding what comes next. Its verified completion is the shown result; the wider tests, tracking, commits, push, and integration follow the owner's acceptance. The rule lives in the grant section beside the sentence that carries every other change through to the authorized destination.
• One Codex review round returned two qualifying findings, both confirmed and fixed: the shown result is reviewed like any other final state, and a request that names a destination or asks to ship is delivery whatever the owner looks at afterwards.
• Guide, README, decision history, evidence ledger, security policy, and changelog describe the 4.4.0 shape and what was not adopted (a separate skill, an owner-side instruction, an edit to the stop sentence, a duplicate in the verification playbook, a hook).
• Version 4.4.0; host-smoke ledger reset for the new candidate with the Claude Code clean install and uninstall receipts on the exact package. Codex clean install is UNVERIFIED on this machine (managed source policy).

Verification

• python scripts/check.py, git diff --check, python scripts/check_hosts.py --smoke on the exact candidate.
• Model behavior on the new wording is UNVERIFIED; the fixture that would show it is listed in docs/evidence.md.

🤖 Generated with Claude Code