A ledger of what changed.

Features

• a fleet PR names the model that actually drove it, and links to the run that shows how

Features

• add full escalation vocabulary to issue/pr loops

Features

• advertise and sync box capability tokens on presence beats

Bug Fixes

• recover escalation category from audit trail

Features

• reconcile diverged local base via parked ref

Bug Fixes

• the rollout target moves forward, so a build published mid-pass is not stranded

Features

• add per-event email list-unsubscribe

Features

• delete the digest policy block, which was documented and unreadable
• give RunnerCapability.Ci a way to be granted, and prove every capability is reachable
• a first-class router provider on the Anthropic wire
• setup mode drafts a per-repo specialist roster

Bug Fixes

• a rate limit is not a permanent verdict on a BYOK key
• the spend cap meters real model spend, and has no platform default
• each failure gets the remedy that fits it, and the comment stops promising a retry the guard refuses
• fold written-back memories into the boot prompt instead of discarding them
• the install outcome carries its cause, so each failure gets one true sentence
• give every capped code.* read a door to the rest
• size the loop's ceilings for the world it runs in

Bug Fixes

• a bearer credential sends the bearer alone, not an empty x-api-key beside it
• normalize the status bun actually returns, and stop asserting numbers nobody measured

Features

• the router provider factory, built and tested standalone

Bug Fixes

• a fresh worktree bootstraps its own dependencies before the gate runs
• stamp the collection into every keyset cursor
• the bootstrap survives a concurrent gate leg, and its own guards can fail

Bug Fixes

• the structured probe says which fault it means, instead of one sentinel for two

Bug Fixes

• the scout dispatch seam named the wrong mothership consumer

Bug Fixes

• an undecodable widget page cursor refuses, instead of serving page 1

Bug Fixes

• a halt condemns on the durable record, not on its own sample of one

Bug Fixes

• an empty route and a missing board render as themselves, not as a blank page and a generic error

Features

• a daily lane that levels every account's built-in dashboards

Bug Fixes

• key the replay gate on the signed body, not the unsigned delivery id
• reach both ownership anchors, and delete the heartbeat route
• stop re-probing a permanently broken BYOK key on the customer's own dime
• classify z.ai credit exhaustion, and size compaction off the registry
• give the seam audit row a target, so two opposite decisions stop looking identical
• lease a concurrency slot per session, not per counter key
• make the public docs say what the code actually does
• refuse the input instead of silently doing the wrong thing

Bug Fixes

• deny-by-default env for the coding shell, and a failed run stops reporting success
• a mail scanner opening an action link is no longer the approval
• whole-tree guards stop being gated on a subset of the repo
• namespace the SSO identity anchor per connection

Bug Fixes

• sweep 4 - frontend, support packages and the guards

Bug Fixes

• sweep 3 - the HTTP edge and the agent surface

Features

• a scout that finds a blocker stops instead of dispatching the plan

Features

• an Org Health built-in dashboard over the served read models

Bug Fixes

• declare agent.default devops and stop rendering a null deploy line

Bug Fixes

• pin the rollback-preserved binary to 0755

Performance

• Anthropic prompt-cache breakpoint on the system part

Bug Fixes

• sweep 1 - 22 defects in the core contract and data layer

Features

• sync a box's address from NATS, which already knows it

Bug Fixes

• the swap preflight stops claiming more than it proves
• no box has recorded an address since liveness moved to NATS

Bug Fixes

• repo-kind sessions were unreapable, and the lock key was on the row all along

Bug Fixes

• the attest job ENOENTs on every runner-only merge

Features

• retention for every published artifact, and a 5-minute adoption cadence

Bug Fixes

• a box that can never swap says so at boot, not on every release

Features

• surface the stop control on the fleet views

Bug Fixes

• fleet PRs now carry a Closes reference, so delivered issues close

Bug Fixes

• a floor review no longer satisfies review presence on the bot lane