变更记录一览。

Bug Fixes

• a scout survey runs on the assignment's sealed pool credential, not only the box env
• forced and in-cluster compaction record the summarizer's ceiling re-ask

Bug Fixes

• dark-theme form controls paint on theme surfaces
• the compaction summarizer recovers from a refused output ceiling, and a parsed cap has a floor

Bug Fixes

• the edge refuses traversal, misspelt keys and unverified SSO, and keeps one-time secrets out of the idempotency ledger

Bug Fixes

• outsider-controlled input no longer resolves our threads, satisfies review, clears a block or links a PR

Bug Fixes

• carry a maintainer approval across a head move that changes nothing

Bug Fixes

• reclaim unused images under the disk floor, and name a run the full disk killed

Bug Fixes

• restore the per-lane failure listener on cron.janitor

Bug Fixes

• every repo command the harness spawns gets the run's own TMPDIR

Bug Fixes

• rewrite zh OG card copy and rebuild the PNGs
• disk floor defaults to 5 GiB, not 20, and the floor reclaim runs to the pressure line

Features

• a Sentry/Linear source stores the vendor's signing secret

Bug Fixes

• spawn repo commands with the checkout trusted by mise

Bug Fixes

• ledger scaffolded files as established, not verified

Bug Fixes

• rewrite zh / copy (home.* + shared cta.* band) in formal register per zh-glossary

Bug Fixes

• GET /v1/tasks refuses unknown top-level query keys by name

Bug Fixes

• a whole-tree quarantine with unreadable untracked files names the root, so git 2.34 does not fail its cleanup

Bug Fixes

• a re-dispatched task starts from what its earlier runs found

Bug Fixes

• the quarantine's whole-tree stash lands around unreadable untracked files, names them on the event, normalizes caller pathspecs

Bug Fixes

• the fleet's own PRs never escalate as first-time contributors

Bug Fixes

• onboarding asks only for proven access, reads honest exit codes, proves fresh, and lands gate-script repairs

Bug Fixes

• a background exit reaches the model as new once, then stays history

Bug Fixes

• the fix wave reads bun frames above (fail), never a usage hint's command

Bug Fixes

• the intake screen reads a task envelope as a work order, not injection
• run a generator the red gate names stale between waves; never route a --check script as an edit

Bug Fixes

• rank WIP saves and resume progress by gate stage before failure count

Bug Fixes

• withdraw a PR's open blockers when the PR settles

Bug Fixes

• formal-register rewrite of zh chrome namespaces

Bug Fixes

• the base probe's stash pop takes by identity, not by position

Bug Fixes

• the uncharged streak counts across the uncharged set, not per kind

Bug Fixes

• scope the repair restart's untracked sweep, cover the throw paths

Bug Fixes

• the in-run conflict repair restart resets to the PR head, not a swallowed abort failure
• 44px footer/lang targets from md, wcag22aa in a11y e2e

Bug Fixes

• name provider "custom" in the Coding Plan refusal message

Bug Fixes

• help's scope-refused footer names an actor that can run the mint
• strip rot-prone:NNN tail from dz-env-vars.md