v3.32.25

## Fixed

**Floating `@metaharness/darwin` pin.** `distill-oracle.ts` invoked `npx --yes @metaharness/darwin` with no version at three call sites (Tier-1 mechanical oracle), floating to npm `latest` — a breaking darwin release could change eval behavior mid-run. Now pinned via a single `MH_DARWIN_PIN = '0.8.0'` constant, declared `@metaharness/darwin: ^0.8.0` in optionalDependencies as the single source of truth, and a stale `~0.3.1` doc comment corrected. Ruflo's analog of upstream [agent-harness-generator#142](https://github.com/ruvnet/agent-harness-generator/issues/142).

## Added

**metaharness pin-drift guard** (the [#149](https://github.com/ruvnet/agent-harness-generator/issues/149) analog ruflo lacked):
- `scripts/check-metaharness-pins.mjs` — diffs each declared range (`metaharness`, `@metaharness/router`, `@metaharness/darwin`) against npm `latest` + a lock-step check that `MH_DARWIN_PIN` satisfies the darwin range. Network flakes warn, never false-positive.
- `.github/workflows/metaharness-pin-drift.yml` — runs weekly + on PRs touching the pins; opens/updates a tracking issue on drift, hard-fails PRs that introduce it.

## Upstream companion PRs

Filed against the metaharness repo: [#150](https://github.com/ruvnet/metaharness/pull/150) (darwin pin ^0.2.2→^0.8.0, #142) and [#151](https://github.com/ruvnet/metaharness/pull/151) (META_PROXY_VERSION→0.7.0 + ported pin-drift watcher, #149).

## Upgrade

```bash
npx ruflo@latest --version   # → 3.32.25
```

Refs: ADR-150, ADR-321.