A ledger of what changed.

Features

• Simplified Chinese for the agents screen
• one status pill per agent card, plain-English stats and no dashes

Bug Fixes

• the one worktree-removal primitive reaps a container-owned tree only on an ownership refusal, and only that tree's own containers

Features

• Simplified Chinese for the organization keys screen

Bug Fixes

• stale-issue sweep skips bots and live tasks, a halted release alias grades withdrawn, cron passes isolate their failures, one disclosing gate for every lane

Features

• Simplified Chinese for billing, personal keys and the key-outage banner

Features

• Simplified Chinese for the consent gate and the console shell
• Simplified Chinese for the overview and repos screens

Bug Fixes

• the outbox relay charges only a row's own fault, a failure write and its audit commit together, janitors stop cleanly with deadlines, every refusal reaches the account trail

Features

• Simplified Chinese for sign-in, navigation and onboarding

Bug Fixes

• a box's event runs only its own class of hooks, a revoked box cannot write, the PR reconcile walks with a cursor, one wedged run no longer hides the audit prune

Bug Fixes

• a conflict merge lands only what was checked under the harness identity, review comments are ours only when the viewer wrote them, an aborted scout run stops, gh input bodies ride private files

Features

• the Agents card frame, five regions on one left edge

Bug Fixes

• a decision is checked against GitHub's head, not the stored one

Bug Fixes

• repo commands and git hooks get an allowlist env, the claim's git auth is an explicit record, the harness-run editor check is deleted, captured output is scrubbed before it is cut

Bug Fixes

• an owed terminal is re-sent as itself, self-update keeps its swap and drains honestly, temp files are synced before rename, a malformed box knob refuses the boot

Bug Fixes

• a live fleet is not reaped off one empty presence read, a failed reconcile is retried, a late error grades nothing, killed gate legs are never no-worse, leaf symlinks stay confined
• the PR reconciler repairs a stale stored head

Features

• shared themed Select, used by the Agents page's four dropdowns

Bug Fixes

• strict lists and cursors, one-transaction approvals, pre-auth buckets scoped to their paths, durable audit trails

Bug Fixes

• a review cancelled mid-run names its cause and never retries onto the dead signal

Bug Fixes

• a webhook claim is secured before dispatch and never changes owner, large files and long lists are bounded, MCP platform writes name their operator

Bug Fixes

• a scout survey runs on the assignment's sealed pool credential, not only the box env
• forced and in-cluster compaction record the summarizer's ceiling re-ask

Bug Fixes

• dark-theme form controls paint on theme surfaces
• the compaction summarizer recovers from a refused output ceiling, and a parsed cap has a floor

Bug Fixes

• the edge refuses traversal, misspelt keys and unverified SSO, and keeps one-time secrets out of the idempotency ledger

Bug Fixes

• outsider-controlled input no longer resolves our threads, satisfies review, clears a block or links a PR

Bug Fixes

• carry a maintainer approval across a head move that changes nothing

Bug Fixes

• reclaim unused images under the disk floor, and name a run the full disk killed

Bug Fixes

• restore the per-lane failure listener on cron.janitor

Bug Fixes

• every repo command the harness spawns gets the run's own TMPDIR

Bug Fixes

• rewrite zh OG card copy and rebuild the PNGs
• disk floor defaults to 5 GiB, not 20, and the floor reclaim runs to the pressure line

Features

• a Sentry/Linear source stores the vendor's signing secret

Bug Fixes

• spawn repo commands with the checkout trusted by mise

Bug Fixes

• ledger scaffolded files as established, not verified

Bug Fixes

• rewrite zh / copy (home.* + shared cta.* band) in formal register per zh-glossary

Bug Fixes

• GET /v1/tasks refuses unknown top-level query keys by name

Bug Fixes

• a whole-tree quarantine with unreadable untracked files names the root, so git 2.34 does not fail its cleanup