Summary

• add the patch 0.1.1 Python PyPI wheel publication approval-request validation record
• bind the exact ethos-pdf==0.1.1 wheel candidate, source commit/tree, SHA256, metadata, and local install/import smoke
• wire the new guard into release-candidate-prep while keeping PyPI upload and public installation wording blocked

Verification

• python3 -m build --wheel --outdir
• shasum -a 256 /ethos_pdf-0.1.1-py3-none-any.whl
• local venv install/import smoke for ethos_pdf-0.1.1-py3-none-any.whl
• python3 .github/scripts/test_patch_0_1_1_python_publication_approval_request.py
• python3 .github/scripts/test_release_candidate_prep.py
• python3 .github/scripts/test_python_public_api_policy.py
• PYTHONPATH=python python3 -m unittest discover -s python/tests
• python3 .github/scripts/test_milestone_e_source_snapshot_candidate_audit.py
• make release-candidate-prep PYTHON=python3
• git diff --check

Boundaries

• no PyPI upload is approved or performed
• no sdist is approved
• hosted surfaces, production positioning, Windows packaged artifacts, bundled PDFium, public benchmark claims, ethos-doc, and ethos-rag remain blocked