[assassin808]

Protocol-only community studies currently fail to import, while saved protocol drafts can be reported as unfinished because completion still requires program.json. Accept hash-verified protocol releases and certify draft structure independently from simulation readiness, preserving the legacy path.

• Pin the received protocol/held-wording list at verified import; serialize concurrent pin updates and reject private paths, duplicate paths and tampered assets.
• Validate exact draft bytes with the bundled schema/static reference checks. Explicit missing material is allowed; stale/forged completion, restart and edits during validation are handled. Full source/mechanical/budget/approval gates still decide whether simulation may run.
• Keep all-blocked protocols previewable and show their missing-material reasons; explain incompatible engine versions.
• Default explicit/automatic hosted build turns to Sonnet, retaining that choice during recovery; ordinary chat defaults to Haiku and explicit user model selections remain authoritative.
• Reuse the existing first-workspace guide with three steps; clarify model-provider transfers and ask the agent for a missing-material email draft without sending it.
• Prepare version 0.8.0-beta.2. No extraction changes, batch resumption, model spend, database migration or public study publication.

Validation: full offline suite 330 passed / 2 skipped before final small follow-ups; final affected-suite and byte-bound restart/import tests pass; TypeScript checks and production desktop/web builds pass; built web main-process server has 5 passing fixture tests. Windows CI and final packaged release verification are required before publication. See docs/protocol-launch-fixes.md for boundaries, including extraction completeness and real-model acceptance not certified by draft checks.