A ledger of what changed.

Features

• the review lane becomes a hive, and the four passes that never ran now run

Features

• the debugger lane gets its first hive, and two defects found while building it

Bug Fixes

• the Ruby toolchain converge installs libffi-dev, so wurk's bundle can build

Bug Fixes

• a box can only write for a task it may serve, and the cross-tenant pool is retired

Features

• one source for the hive rules, seated only where a model actually leads

Features

• sub-scouts get a channel a model can read, and the scout lead corrects a live leaf

Features

• the lead gets a mouth - rule 9's channel had a receiver, one human sender, and zero guidance rows in 60 days

Bug Fixes

• the converged Ruby toolchain can install gems as the runner user, and an Unknown stack with a test dir is not told to build a harness

Bug Fixes

• the coding leaf gets a retry ladder, a coordinator can refuse an assignment, and the task attempt is a real number

Features

• a box provisions the Ruby toolchain, so a Ruby repo's gate can run at all

Bug Fixes

• the ruby toolchain converge reaches an enrolled box

Bug Fixes

• the instrumentation watermark answers for the repos being graded, not the whole table

Bug Fixes

• the repo-service converge reaches an enrolled box

Features

• one hive round contract, and run provenance that names the binary that wrote it

Bug Fixes

• the diff classifier parks the trees that define the merge gate

Features

• every self-update hop the box takes lands as an audit row, a rollout survives a worker redeploy, and update refusals reach the log egress

Bug Fixes

• review worktrees stop leaking into the shared checkout
• a path the harness owns is never a declared manifest file
• one run ceiling, a ledger that resumes only where it is read, a post-edit check that degrades instead of disabling, a recorded blocked rung, and provider failures that stop reading as box faults
• a reaped box stops running the task it lost, a non-advancing credential re-issue is refused, and every dropped fleet event lands a row
• absence is a sentinel — an empty 2xx body is not "file missing"
• the boot credential roll reports too, instead of being dropped
• one tenant's rollout no longer starves every other tenant's
• hygiene learns both halves of the at-head review layout
• fleet PRs close the governing issue the task's envelope names
• a request id no longer spends the review ensemble's only fallback dial, and the sibling is budgeted from its own ceiling
• a babysit follow-up can answer with a reasoned no-change

Features

• .dz/ migration — mechanical guard + config inventory
• revoke reaches the box and halts it, one act decommissions a box, and re-enrolling with --replace retires the predecessor

Bug Fixes

• an ambient ANTHROPIC_BASE_URL can no longer redial an Anthropic-direct review
• classify lefthook.yml as GREEN so hook edits stop parking as unknown-tier

Bug Fixes

• connectivity plane, transport half — ping before the reaper, heartbeat from the beat, mint before rotate, fleet status says unknown, every fleet alert carries its tenant
• exit 75 / 126 / 127 from a gate are not a verdict on the edit
• a third-party coding-agent App can be allowlisted for review
• propagate a failing leg's real exit code out of the gate reporters
• the box converges its own env file — retired keys purged, backups pruned, a root-owned file graded loudly, and the crash-egress DSN delivered from the platform

Features

• dual-read.dz/maintainer/maintainer.yml in policy-ingest and the push predicate
• a box can be decommissioned, the installers agree on one contract, and the env file is owned by the user the unit runs as

Bug Fixes

• a red gate reports the failure, not the end of the pass stream
• a drain releases the in-flight run instead of failing it, a fleet push waits for idle, and every exit path runs one teardown

Bug Fixes

• close five lanes with no producer

Bug Fixes

• re-check the deference per head

Bug Fixes

• pass --no-verify on the harness's own git commit and push

Bug Fixes

• audit the push-supersede review cancel

Bug Fixes

• name the drain signal's abort reason

Bug Fixes

• the at-head tree fetches the reviewed commit, and says why when it cannot

Bug Fixes

• give every lane-fence purpose an approved-model source

Features

• report time-to-first-bot-action per item

Bug Fixes

• the committed merge posture refuses every PR
• give the per-lane approved-model gate a committed home it can fire from

Features

• hive rules 6, 8 and 9 — the lead names the check, works, and steers

Bug Fixes

• a refusal id the platform never declared, and an excusal nobody counted

Features

• the converge runs the Redis a repo's gate needs, so the advert has something true to report

Bug Fixes

• a babysit follow-up may not edit the gate whose verdict triggered it

Features

• a repo can declare the services its gate needs, and a box that cannot reach them stops claiming its work

Bug Fixes

• one tenant's boxes cannot withdraw a release from every tenant