docs: prepare Tobi Validator GitHub Action v2 release line

[OrganeticSphere]

Purpose

Prepare the current supported Tobi Validator GitHub Action v2 line before Marketplace publication.

Version decision

• v1.0.0 is the legacy exact Marketplace release.
• Floating v1 is frozen.
• v2 is the new maintained major.
• v2.0.0 will be published only after this PR is merged and Aset supplies explicit release authorization.

Compatibility boundary

• Action execution body unchanged.
• eval_token unchanged and still required.
• TOBI_EVAL_TOKEN unchanged.
• canon and golden unchanged; no validate mode.
• Default validator release unchanged at stage1-tobi-validator-v0.7.0.
• No Tobi or Tsubasa semantic change.
• No private validator source, binary-distribution logic, or public verification API added.

Migration

The migration guide separates:

• floating @v1 consumers that already use eval_token: change the Action reference to @v2; the token input, secret convention, mode, and default validator release stay unchanged;
• exact @v1.0.0 consumers using the historical dist_token contract: obtain approved Organetic evaluation access, use TOBI_EVAL_TOKEN through eval_token, remove direct-distribution credential configuration, and preserve canon/golden usage.

Changed files

• .github/workflows/public-surface-check.yml
• README.md
• docs/STAGE1_GITHUB_ACTION_STARTER.md
• docs/TOBI_ACTION_V2_MIGRATION.md
• docs/TOBI_ACTION_VERSION_POLICY.md
• examples/github-actions/stage1_tobi_validator_example.yml

Validation

Exact preparation base: origin/main@86c7fbf5d052c9fdee08d29c789e4b2284a77786.

• git status --short -> PASS; clean worktree.
• git diff --check origin/main...HEAD -> PASS.
• git diff --exit-code origin/main -- action.yml -> PASS; no Action behavior file delta.
• git hash-object action.yml -> c3bdca0f01e445c9d3b8369e4c38216b57acc3ac.
• git show origin/main:action.yml | git hash-object --stdin -> c3bdca0f01e445c9d3b8369e4c38216b57acc3ac.
• Embedded public-surface workflow Python executed locally -> PASS; 20 current public-surface files validated.
• PyYAML safe_load for action.yml, .github/workflows/public-surface-check.yml, and examples/github-actions/stage1_tobi_validator_example.yml -> PASS.
• JSON fixture parsing, relative links, Markdown fence balance, trailing whitespace, current-v2 examples, frozen-v1 allowlist, token boundaries, Action modes, and default validator release -> PASS through the public-surface checks.
• git grep -nF 'OrganeticSphere/tobi-validator@v1' -> only the explicit migration example and the unchanged historical v1 report.
• dist_token -> only the explicit migration explanation and unchanged historical reports.
• Organetic X profile link https://x.com/OrganeticSphere resolves and is listed beside the Telegram channel in README.md.
• Issue-template frontmatter -> not applicable; no issue template was touched.
• Validator runtime tests -> not run; this is docs/CI-only and action.yml is byte-identical to the selected base.

Tags/releases

No tags or releases created.
v1 not moved.
v1.0.0 unchanged.
Marketplace unchanged.

Policy artifacts

No tracked naming-policy home was found. Replacement-ready artifacts were prepared locally outside any Git repository:

• C:\Users\yasin\AppData\Local\Temp\tobi-action-v2-policy-artifacts-20260823\TOBI_PUBLIC_NAMING_CONTRACT_v0_3.md (3338 bytes, SHA-256 2C0EB361C5FA9C7162F6C5BB436E62F263615AD3B6EA9844673A32181203EB0F)
• C:\Users\yasin\AppData\Local\Temp\tobi-action-v2-policy-artifacts-20260823\TOBI_PUBLIC_NAMING_MIGRATION_CHECKLIST_v0_2.md (3367 bytes, SHA-256 83DCDBD2C7CA8BD3F889C0133278B2FF4C629009A0A95801B78CBB5432C293B0)

Artifact status: DRAFT AMENDMENT - MAIN VERSION-LINE DECISION INCORPORATED - ASET POLICY/RELEASE APPROVAL PENDING. Source activation is not claimed.

Review request

Please perform Main exact-head review of 7cc36731b5faff4d84f1f94229e4c306d3392eb9.

This PR remains Draft. Phase B has not started; no publication action is authorized by this preparation PR.

[OrganeticSphere]

MAIN_EXACT_HEAD_REVIEW: COMPLETED

REVIEWED_HEAD: 7cc36731b5faff4d84f1f94229e4c306d3392eb9
BASE: 86c7fbf5d052c9fdee08d29c789e4b2284a77786
HEAD_TREE: c8c84f66ab90ef05c09da989cb024ac8cbfdaa3b

Findings:

• exact six-file contour confirmed;
• branch is ahead 3 / behind 0;
• action.yml is byte-identical to base (blob c3bdca0f01e445c9d3b8369e4c38216b57acc3ac);
• current-facing Action references migrate to @v2;
• v1.0.0 and frozen floating v1 are classified explicitly;
• eval_token, TOBI_EVAL_TOKEN, canon, golden, and stage1-tobi-validator-v0.7.0 are preserved;
• exact-head workflow run 32638410300 succeeded; PR merge-ref tree equals the reviewed head tree;
• no v2 or v2.0.0 ref exists yet;
• no tags, releases, Marketplace state, Tobi behavior, Tsubasa semantics, Stage 2, or Project Sources were changed.

P1: NONE
P2: NONE

Documented limitations:

1. The local v0.3 naming-contract and v0.2 checklist artifacts are not durable or Source-active and were not available to Main for byte/content review. This does not block PR docs: prepare Tobi Validator GitHub Action v2 release line #8, but it blocks claiming that the policy amendment is activated.
2. After merge, current docs will point to @v2; therefore merge must be operationally coupled to immediate authorized Phase B publication. Do not merge and leave the repository indefinitely without v2.0.0 and floating v2.

VERDICT: PASSED_WITH_DOCUMENTED_LIMITATIONS
MERGE_RECOMMENDATION: MERGE_SAFE_WITH_RELEASE_COUPLING
PR_STATE: may be marked Ready when Aset is prepared to authorize and execute Phase B immediately after merge.
REQUIRED MERGE METHOD: CREATE_A_MERGE_COMMIT

Phase B remains unauthorized until Aset supplies the explicit release authorization and exact merged commit.

[OrganeticSphere]

Phase B release evidence

Release transaction completed against merge commit 0fdf6168e689cffc5607eae2f69f8fca666fb1e2 (tree c8c84f66ab90ef05c09da989cb024ac8cbfdaa3b).

• Release: Tobi Validator GitHub Action v2.0.0
• Release state: published, non-draft, non-prerelease, Latest, Marketplace-enabled
• Marketplace: Tobi Validator GitHub Action
• Marketplace search result count for "Tobi Validator": 1
• Marketplace latest version: v2.0.0
• Marketplace install snippet: uses: OrganeticSphere/tobi-validator@v2.0.0
• v2.0.0 -> 0fdf6168e689cffc5607eae2f69f8fca666fb1e2
• v2 -> 0fdf6168e689cffc5607eae2f69f8fca666fb1e2
• Existing v1 and v1.0.0 refs remained unchanged

Smoke evidence:

• Exact release SHA / main: Linux/Windows canon/golden all passed
• Exact v2.0.0 ref: Linux/Windows canon/golden all passed
• Floating v2 ref: Linux/Windows canon/golden all passed

Boundaries verified: no Action implementation change during publication, no validator/Tsubasa semantic change, no binary publication, no Stage 2 or Project Sources change, and no token value exposure. macOS smoke was not run because the repository's existing smoke workflow contains only Linux and Windows jobs.