A ledger of what changed.

Features

• a brief that bounds the work to a file set refuses an escaping group at admission

Bug Fixes

• audit feed stamps date for rows outside today
• cut shell comments inside the ref guard's scan, not after it

Features

• the home page shows the fleet working, and every figure carries a dated source
• four pages a buyer reaches, and no deck that publishes an internal number
• the home page says what the owner ruled, and no figure on it is uncited
• the explainer shows the pipeline at zero JS, the architecture claim has a page, and no deck can print an internal number
• a repo agent's declared tools narrow the seat, instead of being read and dropped
• five sections whose claims the ledger cleared and which shipped nowhere
• recipe bodies become markdown served verbatim, with the calls still schema-checked
• the writes only REST could do, and three gaps closed with a reason
• the once-per-repo journey, and a #{{key}} that resolves to nothing says so at write time
• seven recipes for the journeys nothing taught, and a coverage guard over the whole surface
• one read answers "anything waiting on me?", and the push decision is written down

Bug Fixes

• a selection's lane comes from the files it names, not the argument's spelling
• a settled follow-up's worktree is released only when git proves it pushed
• name three orphan wire codes — a stamp is not a grade
• the thread scan counts every skip, not the two rules it names
• GitHub's own merge refusal reaches the row a caller reads
• a repeated tool call whose ANSWER changed is not a loop
• review presence refuses a floor review on every lane, not just the bot lane
• infer model prices from the provider's published rate card instead of dropping it
• an editor seat's claim refuses the write, instead of being graded after the round
• futility counts per answer within a mutation epoch, not as a streak
• a pool refusal names the top-up, not "nothing to fix"
• a codegraph connect has a whole-connect ceiling, and the loser of that race is reaped
• the gate discovers what git says is in the repo, instead of whatever is in the directory
• an inline comment is the finding, and nothing else
• codegraph installs the version this repo pins, verified against a digest of ours
• a refusal names a verb, a URL or a role — and none of them loops
• the merge gate reads the mandatory pass set that approval is already gated on
• a tool's permission family is a property it carries, not a substring of its name
• docs({q}) stops inlining the wrong guide, and every tool row names it
• the policy a prospect is shown comes from the guarded module, not a JSX literal
• the /vs/devin lead stops claiming what is worth building, and the guard gains an axis rather than a fifth spelling
• a waitlisted person is told why in the chat client, and approval hands over the MCP URL
• the setup lane composes the tenant cascade, so prompts written before project setup actually shape it
• the weekly digest aggregates in SQL instead of loading a week of audit jsonb into the worker
• the mockups stop stating a price nobody can source, and a guard refuses the next one
• a hidden mockup may not hold a focusable control, and the decision moves to the variant
• one array answers who holds a region, so the lead stops naming a seat that never ran

Features

• Solo $100 flat for personal accounts, Team $500 per AI dev for life

Bug Fixes

• end a run that advances turns without getting anywhere

Bug Fixes

• a drained run's work survives the box, instead of dying at the gate

Bug Fixes

• the post-edit check arms for a hive editor, and reports rather than ends
• triage re-asks once when the judge schedules nothing or answers an unknown verdict
• one box learns the pool is still empty, not eight

Features

• a task's second PR stops being invisible, and a reply keeps its warm box

Bug Fixes

• the BYOK anthropic provider carries the tool-name shim — the last unwrapped Anthropic-wire builder

Features

• publish the prediction, and the limit that says it knows the task
• per-project agent modes — switch a mode off, narrow its tools
• every model call says when it started, that it is still running, and what it cost
• an Owner label names who started each custom plan
• a fix round answering only minor findings is bounded to the size of its answer
• the audit tail index, run out-of-band, and a backfill scope narrowed to what cannot be mis-attributed
• one intake door, and a triage verdict that asks

Bug Fixes

• sit the ARTIFACT_SLICES floor below its measurement
• scale a review's cost with the diff — one sample, capped output, on a small change
• the repo root is an allow-list of files, not of markdown
• move the platform Redis off 6379 and hand REDIS_URL only to repos that declared it
• each stall-holders case owns its account, so no case claims another's rows
• a re-read of an unchanged head raises no new threads
• the stall-holders setup no longer asserts an undecidable claim order
• an orphan row that grants privilege is never adopted by login alone
• adoption holds the user row, so a membership cannot commit under it
• a gate that refuses to grade twice latches, instead of being re-offered forever
• a box-local failure excludes the box that produced it
• a latched gate ENDS the run, with the gate as its reason
• the landing gate excuses a path by what the run WROTE there — content and mode, at both windows
• 0209 skips the null that would collide with the orphan-login unique
• the router provider rewrites dotted tool names — k3 refuses them (fleet down)

Features

• every lane audits the sha256 of the prompt it sent, per layer
• the Terminal wire type and the exhaustive projection over 186 audit kinds
• the harnesses warn before they kill, keep what the model needs, and index repo skills
• a red team attempt's diff is resumed from dz/wip/<task>, not re-surveyed
• stronger fs/search tools and per-route thinking mode

Bug Fixes

• the runner unit allows AF_NETLINK, so getifaddrs works in every child
• an over-cap babysit file set is coarsened into subtrees, not emptied
• a diff-owned red with no readable path still buys a fix wave
• guard trips and the session leash stop live work; the kill ladder is kit's reaper; leaked pgids reach the next pass

Bug Fixes

• a red base no longer blocks every diff — the gate compares failure sets
• the autofix cut admits the lint leg closing itself

Bug Fixes

• a review no longer holds a declared editor, and task stalls names the real holder

Bug Fixes

• delivered repo secrets reach the agent's shell on the native lanes

Features

• the org-scoped Terminal tail, and the isolation guard that ships before any route

Bug Fixes

• bin/setup starts from a dependency tree derived from the checkout's lockfile

Bug Fixes

• task list filters by repo, and an unknown key in a nested argument is refused

Features

• a Custom plans section on the fleet plans page

Bug Fixes

• the audit-chain case gives its rows a monotonic ts, instead of asserting a property of the clock
• a moved base no longer spends the conflict budget
• task-failure-report states the window it actually covers
• name the survey-to-working failure, and stop completed claiming a pull request it does not hold
• declaredness breaks the claim tie, and the stall report names the area holder
• check a scout plan against its brief at admission, refuse a void one before minting

Features

• add 'source' discriminator (scout | custom) to PlanSummary and PlanProjection
• /proof states the study as a shape, and the run card stops being a card

Bug Fixes

• re-date the vs meta descriptions, and anchor the citation guard

Bug Fixes

• the merge question can be answered
• a dead Devin citation, and two quota cells that ignore a free allowance
• the frozen model is compared by identity, through one named table

Bug Fixes

• qualify five competitor claims stated as universals, and date the notes to a month

Features

• the run card shows the size class and the harness pairing
• a plan records who started it, and the list can filter on it
• register zh, and gate every locale instead of a hardcoded pair

Bug Fixes

• an arm records the set of models it was served, and one that varied is refused
• /proof says what the public record says, and every refusal it can see has a sentence
• a setup pass parks the box's own dirt at task start, and a tree refusal retries
• the transcript is a field, not a promise keyed on a record existing
• the verdict panel reads the arm, not the pair
• the served model carries its denominator
• a BYOK key comes back by itself, or says why, and a blind review stops blaming the wrong thing
• a locale that quotes CNY renders CNY, and the page says what it bills
• one punctuation convention in zh.json, and a guard that keeps it

Bug Fixes

• the reconcile cron stops probing revoked keys against the provider

Bug Fixes

• bin/check wins over DZ_TEAM_VERIFY_COMMAND

Bug Fixes

• write the lifecycle email.sent audit durably, anchored on the account

Features

• abort a CI dispatch whose job is re-placed mid-run

Bug Fixes

• retarget four onboarding file:line citations after the routes -> deps move
• the session cap honours purchased seats, with the tier number as its floor

Bug Fixes

• the dz-env-vars ref guard tracks /* */ block comments across lines
• a capacity-capped agent.run job waits for a slot instead of being dropped

Bug Fixes

• a parked ledger drains when the account's key is already usable, not only on a key transition

Bug Fixes

• a key coming back re-drives all of an account's parked work, not the first 100

Bug Fixes

• a key the provider still honours comes back by itself, and a keyless scout says so

Bug Fixes

• kill code.bash on silence and size the check budget absolutely

Bug Fixes

• give the disk-floor refusal its own UNCHARGED failure kind