A ledger of what changed.

Features

• caller-file context for the review prefetch — blast-radius names read from the tree

Bug Fixes

• narrow the tree-gap emit to the arms where the tree is the next row to read

Performance

• the review burst's top-up round is bounded by the same deadline

Performance

• the review wave slides inside a pass and barriers only at the ladder rung

Bug Fixes

• a frozen payload renders as frozen, and an accept path cannot leave the repo

Performance

• a review sampling burst stops waiting for a straggler once a peer has answered

Features

• a branch-protection client that reads the ruleset back

Features

• report AA30 (agent-authored share) across a repo list in repo-autonomy

Features

• install the toolchain manager and build baseline in the curl|sh join door

Bug Fixes

• tree-gap audit fires on unproven, not ladder arm

Bug Fixes

• the survey-unwired arm keeps its full attempt ladder

Bug Fixes

• a truncation after an accepted answer surrendered the answer too
• make the review-blind alarm answerable, and stop it missing an empty lane
• the autonomy report refuses a pull-request-blind listing instead of printing an issues-only rate

Bug Fixes

• split the scout grounding fault so an unproven tree is not a box fault
• the account board reported itself saturated forever, serialising every repo
• bound the pin-map total, and test the merge property that nothing tested
• hand the cluster CA to the Kubernetes API TLS layer

Bug Fixes

• wire dz-config-migrate guard seams to live observations

Features

• run each closing issue's live-test fence after the deploy and write the verdict to the issue

Bug Fixes

• wire the triage judge into the fleet-alerts cron
• the CLAUDE.md byte ratchet pins per-file, closing the merge race

Features

• the scout can hand its context back, and mints nothing when it does

Bug Fixes

• drop engines.ladder — its pre-launch probe parks every mode-6 dispatch

Features

• watch the stall report, so a queue held for a day is said out loud

Bug Fixes

• a triage claim is counted, and an ask out of claims is settled instead of re-claimed forever

Bug Fixes

• a box-maintenance run asks for no git credential, so the weekly fleet-upkeep lane stops failing 31 of 31

Features

• /healthz reports the build sha through one release reader
• deploy only on green CI, record a production Deployment per sha, verify the roll live

Bug Fixes

• an unreadable policy file is not an absent one
• ui-debugger tool-service pair moves under.dz/ui-debugger/
• every surface names the policy home the runner resolves
• two lanes that destroy bytes on a schedule left no queryable trace
• main is red because a rename could not reach a test that did not exist yet
• the pipeline config is NOT green — both homes join the human-merge lane
• a box that cannot run the commit hook now repairs itself instead of discarding the work
• the qa.bug fingerprint, the digest period, and the box-warden roster each lied about dedupe
• four scheduled sweeps that could never converge now drain or say why
• cron lanes claimed a BullMQ retry they never registered, and one blind gather could silence every fleet alarm
• the maintenance lanes' own reports now say what they swept, skipped and why
• escalation nudges must name a performable action, not a label the repo lacks
• the merge gate waits for an incumbent reviewer, bounded by the window it already measured
• lift the "no unobserved claims" rule to the platform floor
• degrade to reasoning-on when OpenRouter refuses suppression
• append /v1 to z.ai Anthropic wire base URL
• record the model the provider SERVED, not just the one we asked for
• a superseded sha is not a failed release
• ceiling the whole-tree corpus-guard rescans at 30s, not bun's 5s default
• extract the triage-judge module and its alert kind
• mask credential shapes in git output, not only URL userinfo
• a provider reset stated without a year is dropped, and a rolled calendar day is fabricated
• the dev Dragonfly stops keeping every 10-minute snapshot forever
• the status-POST retry ladder holds the process alive, and a spawned-process guard proves it

Bug Fixes

• make a corpus freeze git discards impossible to write

Bug Fixes

• a review that could not look approved the PR — 118 real GitHub approvals in 7d from runs with no codegraph

Bug Fixes

• the lane that deletes release bytes four times a day audited to stdout, so prod holds zero rows for every pass it ever ran

Bug Fixes

• a reasoning model reached through a gateway escapes the suppression gate, so a bounded review call spends its whole budget thinking
• the at-head index syncs a throwaway copy and deletes it, so every review re-pays the checkout's whole drift
• the arbiter reads the two new held axes, and the hold pass keys on the gates whose ONLY writer is this claim

Bug Fixes

• a cache keyed so nothing can ever read it, and a merge that cancels the only gate the commit behind it will ever get

Performance

• a scripts edit typechecked the whole repo three times, and the fast path everyone reaches for is unsound

Bug Fixes

• the harness named the wrong registry, prescribed the command every brief bans, and prompted for the reads it tells agents to run

Bug Fixes

• a review that paid for tokens and printed no cost line, MCP children that leaked on the polite path, and four more prompt seams than anyone had counted
• ten screens whose data body was an error box, one socket per widget, and a client type wrong on every field it disagreed with the server about

Bug Fixes

• a by-id key read whose fence was a fourth-caller coin flip, and the id-brand split that would have made the plan's next step an outage
• a kill path that cancelled its own SIGKILL, a drain that could not release a queued member, and three guards that had gone blind

Bug Fixes

• a repeatable sweep that pruned nothing for its whole life, and a lane that declares its audit instead of forgetting it

Features

• the last six gates, where the census was wrong in five of six, plus an agent roster that had been prescribing the whole-tree gate to subagents