v1.70.0

# v1.70.0 (stable)

First stable release of the 1.70.0 line. Promotes content that has soaked through the `1.70.0-beta.0 / beta.1 / beta.2 / beta.4` prerelease channel without regressions.

## Highlights

### First-run auto-buyer prompt (beta.0)
When `evolver` is launched for the first time and the local skill cache is empty, the CLI now shows an opt-in prompt that offers to fetch a short starter bundle of public skills so new users can see how Evolver composes genes on day one. The prompt is skipped in non-interactive environments (CI, pipes, `--yes`, `EVOLVER_NON_INTERACTIVE=1`). Tracked in #10.

### Documentation
- All four READMEs (`README.public.md`, `README.zh-CN.md`, `README.ja-JP.md`, `README.ko-KR.md`) now feature the arXiv:2604.15097 paper and link to the OpenClaw x EvoMap CritPt evaluation report (beta.1 + beta.2).

### Diagnostic logging hardening (beta.4)
- `selfPR.writeState` now surfaces a `DEBUG`-gated diagnostic message when the state file write fails, instead of silently dropping the error. Default behaviour (quiet) is unchanged; set `DEBUG=1` to see the diagnostic. Inspired by community PR #497 from `@gugli4ifenix-design`.

## What is intentionally NOT in this release

The following items remain on the `@evomap/evolver@beta` channel and will ship in `1.70.1` once they have received more user feedback:

- `1.70.0-beta.3` — Kiro IDE / Kiro CLI adapter (#472). Still waiting on beta feedback from adopters.
- `1.70.0-beta.5` — Security fixes (GHSA-cfcj-hqpf-hccf, GHSA-jxh8-jh77-xh6g, GHSA-7xp7-m392-h92c) and community PR ports (#514, #515, #516). These contain a behavioural change (`npm`/`npx` no longer allowed as validator sandbox executables) and need one more cycle of observation before going to `latest`.

If you need the security fixes today, stay on the beta channel:
```bash
npm install -g @evomap/evolver@beta
```

## Install

```bash
npm install -g @evomap/evolver@latest
```

## Contributors

Thanks to `@autogame-17` (#10), `@gugli4ifenix-design` (#497).