fix: correct Akua Homebrew ownership

[robinbraemer]

Intent

Deliver the captain-approved phase-one current Akua Homebrew ownership correction in akua-dev/homebrew-tap as exactly one narrow review-ready PR. Keep the Akua core formula at v0.8.25 with all four macOS/Linux artifacts and their known verified checksums from akua-dev/akua, current release-workflow provenance, and its existing class/install/test behavior. Reject every tracked cnap-tech or CNAP ownership reference, remove the legacy CNAP repository identity, and retain zero references to the future akua-dev/cli takeover lane; do not add the TypeScript receiver or alter ownership toward that future CLI. Validate with the focused contract test, all repository tests, Homebrew audit/style/formula test, four direct artifact hash checks, and an isolated macOS install/version smoke that does not disturb the active Homebrew installation. Repository description and homepage were separately authorized and corrected via gh-axi only; do not alter other repository settings. Push only fm/akua-homebrew-current-ownership-h9, create one PR, never write or merge main, and stop when CI is green.

What Changed

• Point the Akua formula’s homepage, release provenance, and all four v0.8.25 artifact URLs at akua-dev/akua while preserving existing checksums and formula behavior.
• Remove the legacy CNAP formula and update the README with Akua tap installation and upgrade commands.
• Add contract tests that enforce current Akua ownership, pinned release artifacts, and the formula’s class, install, and test behavior.

Risk Assessment

🚨 High: The checked-in correction is internally coherent, but active upstream release automation will automatically revert it on the next stable release.

Testing

The focused contract and full repository suite passed; all four release hashes matched; an isolated macOS Homebrew install produced Akua 0.8.25 and passed its formula test without altering active Akua 0.8.20; ownership and live repository metadata matched intent. Homebrew audit/style were not run because the testing rules explicitly prohibited linters and static analysis.

Evidence: Release artifact hashes

All four v0.8.25 macOS/Linux archives matched their pinned SHA-256 checksums.

PASS aarch64-apple-darwin sha256=e229f7d6d4b14b7749dcb14f2cacc4465f260c9c664a0ddc9c2f7d2025884fbf bytes=73274105
PASS x86_64-apple-darwin sha256=6468e2b0d97f48b114bfa339c26f3d8ead339226d252fa07296bde274581a845 bytes=76112753
PASS aarch64-unknown-linux-gnu sha256=3a3c6bae72764cbd85a6e4e0877a05e5def8f7aeee8563b7918099214a1a313a bytes=73163167
PASS x86_64-unknown-linux-gnu sha256=bc57afbffe7e18aacd2146e2cd67151c56e7a3c279fe659312ff7ffb359cd03a bytes=78086547

Evidence: Isolated Homebrew smoke

Disposable Homebrew installed Akua 0.8.25, reported the correct version, passed the formula test, and left active Akua 0.8.20 byte-for-byte unchanged.

active-before version=akua 0.8.20 sha256=1169123d6820a004f820df9fac89d616bc8e4f9f3d7524e9608b7b9b79d8966f
isolated-command=.tmp-homebrew/bin/brew install --formula akua-dev/tap/akua
==> Trusted formula akua-dev/tap/akua
==> Would install 1 formula:
akua
==> Fetching downloads for: akua
✔︎ Formula akua (0.8.25)
==> Installing akua from akua-dev/tap
Warning: Your Xcode (26.2) is outdated.
Please update to Xcode 26.3 (or delete it).
Xcode can be updated from the App Store.


This is a Tier 2 configuration:
  https://docs.brew.sh/Support-Tiers#tier-2
You can report issues with Tier 2 configurations to Homebrew/* repositories!
Read the above document before opening any issues or PRs.

==> Caveats
The following akua executables are shadowed by other commands earlier in your PATH:
  akua (shadowed by /opt/homebrew/bin/akua)
Running these by name will not invoke the version provided by Homebrew.
==> Summary
🍺  /Users/robin/.no-mistakes/worktrees/b35f825ccb41/01KXAPNACVY0SRND45YA8QARG3/.tmp-homebrew/Cellar/akua/0.8.25: 7 files, 232.2MB, built in 1 second
isolated-installed=akua 0.8.25
isolated-version=akua 0.8.25
==> Testing akua-dev/tap/akua
==> /Users/robin/.no-mistakes/worktrees/b35f825ccb41/01KXAPNACVY0SRND45YA8QARG3/
isolated-formula-test=PASS
active-after version=akua 0.8.20 sha256=1169123d6820a004f820df9fac89d616bc8e4f9f3d7524e9608b7b9b79d8966f
active-installation-unchanged=PASS

Evidence: Ownership scan

tracked-ownership-scan=PASS legacy_refs=0 future_cli_refs=0

tracked-ownership-scan=PASS legacy_refs=0 future_cli_refs=0

Evidence: Repository metadata

{"default_branch":"main","description":"Homebrew tap for Akua CLI","homepage":"https://github.com/akua-dev/akua","repo":"akua-dev/homebrew-tap"}

{"default_branch":"main","description":"Homebrew tap for Akua CLI","homepage":"https://github.com/akua-dev/akua","repo":"akua-dev/homebrew-tap"}

Pipeline

Updates from git push no-mistakes

✅ **intent** - passed

✅ No issues found.

✅ **Rebase** - passed

✅ No issues found.

⚠️ **Review** - 1 error

• 🚨 Formula/akua.rb:3 - The formula now claims Akua’s release workflow owns this corrected shape, but the current akua-dev/akua release.yml still rewrites Formula/akua.rb with cnap-tech URLs, homepage, and provenance. The next stable release will undo this ownership correction and violate the new contract test. Coordinate the upstream workflow correction before merging or explicitly approve that temporary inconsistency. Current workflow

✅ **Test** - passed

✅ No issues found.

• Inspected git diff e753380c7cf5b3dc08e6c24d78ea38d882726de1..2b6cb25a687ded68480c4a88ada49e8d083b4775 and the active Homebrew state.
• ruby test/akua_formula_contract_test.rb
• ruby -Itest -e 'Dir["test/**/*_test.rb"].sort.each { |file| require File.expand_path(file) }'
• Downloaded all four formula release URLs with curl --fail --location and checked each using shasum -a 256.
• In a disposable worktree-local Homebrew prefix: brew install --formula akua-dev/tap/akua, installed-binary akua --version, and brew test akua-dev/tap/akua.
• Compared /opt/homebrew/opt/akua/bin/akua version and SHA-256 before and after isolated testing.
• git grep -n -E 'cnap-tech|CNAP|akua-dev/cli' across tracked content.
• Read live repository metadata using gh-axi repo view, then authenticated gh repo view ... --json for the homepage field.
• Removed .tmp-homebrew and .tmp-akua-artifacts, reran both automated test commands, and verified git status --short was empty.

✅ **Document** - passed

✅ No issues found.

✅ **Lint** - passed

✅ No issues found.

✅ **Push** - passed

✅ No issues found.

[robinbraemer]

BLOCKED: Do not merge this tap PR until akua-dev/akua#69 has merged and akua-dev/akua main has been verified writer-free (the core Homebrew writer must be absent). This dependency records the captain-approved coordination decision; temporary release-automation inconsistency is not approved.