A ledger of what changed.

Features

• give the grounding tree the reviewed head SHA
• The setup pass decides; the renderers write
• a per-task attempt ladder on the task detail page

Features

• make split-runner-claude-md target selectable
• every fleet alert leaves a durable audit row, including its delivery outcome
• the ranked failure-class table in the ops digest

Bug Fixes

• stop advertising a nullable column as a widget sort key, and repair the 7 boards

Features

• cancel a held plan — one stop, the whole plan

Bug Fixes

• aitm purge fixtures — arrangement, not assertions

Features

• wire deploy-proof lane end-to-end, INERT until App holds deployments:read

Features

• pin dz/onboarding to human-merge, surface the stall

Bug Fixes

• the team coordinator's manifest rejection is terminal after three identical asks

Bug Fixes

• refuse a widget whose sort or filter key its reader cannot honour

Bug Fixes

• run the pre-commit path on native binaries so a box with no node can commit

Features

• the dispatch conversation contract and its error taxonomy

Features

• CI capability without env flag + enrollment flow

Bug Fixes

• the fleet failure-rate alarm had no denominator, so it could only say 100%

Bug Fixes

• an unconfigured escalation email threw, and the throw did the damage
• every Spanish body link walked the reader back into English
• an operator cancel left its review check wedged for 45 minutes

Bug Fixes

• five surfaces claimed things they could not know

Bug Fixes

• two guards were green over the class they exist to catch

Bug Fixes

• donation create could give away a member's PERSONAL key and private box
• a REFUSED KB write emitted an audit row for a page nobody stored
• box releases hid every halted release behind an undisclosed cap

Bug Fixes

• a RetryError-wrapped refusal was filed as a residual provider failure
• the model gate's rollback restored the very lane it protects against
• a cancelled review left its check run queued forever

Bug Fixes

• the coding lane could not explain its own failures

Features

• hold a plan for approval and a verb to release it (2680)

Bug Fixes

• an expired credential is not a wiring fault

Bug Fixes

• 59% of issue triage was a non-answer recorded as a success
• a credential re-issue minted the expiry it was replacing

Bug Fixes

• a gate that could not run is not a diff that is red

Bug Fixes

• the factory wasted half its runs and could not say why

Bug Fixes

• a babysit follow-up that landed nothing reported the task done

Features

• give the tool contract a real version — SERVER_INFO only, zero catalog cost

Bug Fixes

• a 429-paused BYOK key has no automatic way back — stamp a retry so the re-probe recovers it

Bug Fixes

• a reply sent while the scout is thinking is dropped, not queued - no human has ever talked back

Features

• delete the spawn lane, and refuse a box still configured for it

Bug Fixes

• the spawned scout surveyed the runner's own cwd, not the repo it was asked about

Bug Fixes

• triage is flight control — one per org, and nobody rewrites its procedure

Features

• alarm when an account's lane credentials fall below a floor

Features

• a sustained failure-rate alarm, replacing the per-attempt spam

Bug Fixes

• a review that could not provision its grounding tree may not approve