Closes #50

* ci: bump urllib3 from 2.7.0 to 2.8.0

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.7.0...2.8.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.8.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

* fix: update vulnerable contributor environment dependencies

* fix: serialize current Specs through its public mapping contract

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Stefan Jansen <[email protected]>

A non-positive turnover cap replaced the target book with zeros, which
liquidates an existing portfolio instead of forbidding trades. A zero cap
now scales weight changes to the previous holdings, and a negative cap is
rejected.

Co-authored-by: quantum-like <[email protected]>

Hidden beta networks skip one-row minibatches because BatchNorm cannot
train on them. When every batch was a single row, fit still returned a
converged model whose weights were the random initialization. That fit
now fails instead of emitting an untrained beta surface.

Co-authored-by: quantum-like <[email protected]>

A configured batch size that left a one-row tail, or a single valid
training row, crashed inside BatchNorm during training. Singleton tails
are folded into the previous batch, and a one-row sample now raises a
clear error before any update.

Co-authored-by: quantum-like <[email protected]>

A fully blocked adjacency row, or a node whose only neighbors are missing,
produced NaN attention and NaN portfolio weights. Those queries now attend
to themselves when present, and otherwise use a finite fallback.

Co-authored-by: quantum-like <[email protected]>

When the lag exceeded the window length, the history slice used a
negative stop and either crashed or read the end of the same window.
Lags that reach past the start of the window now see an empty history.

Co-authored-by: quantum-like <[email protected]>

)

Bumps the github-actions group with 3 updates in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `astral-sh/setup-uv` from 10.1.0 to 10.3.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@bec219d...1c37ad0)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Stefan Jansen <[email protected]>

* docs: make model workflows runnable and link verified book examples

* docs: clarify stable Python 3.15 core-only qualification

* docs: remove workstation path from public bibliography guidance

* docs: keep model diagrams and tables readable across screen widths

* docs: adopt shared focused-contribution policy

* docs: retain shared maintainer batching rules in contribution guidance

* docs: distinguish the local batching exception from published shared policy

* ci: bump urllib3 from 2.7.0 to 2.8.0

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.7.0...2.8.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.8.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

* fix: update vulnerable contributor environment dependencies

* fix: preserve calendar intent through model feed handoffs

Closes #61

* fix: retain optional feed fields without Specs installed

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: prepare 0.1.5 patch release

* docs: describe qualification within the release workflow

* fix: refresh certifi and virtualenv security patches