变更记录一览。

Bug Fixes

• Blacksmith comparison acknowledges 3,000 free minutes

Bug Fixes

• the backfill could not repair a row, and its write was not scoped to a repo

Features

• surface keyless tenants in the daily ops digest

Bug Fixes

• name the binary that wrote a row, not the box's current build

Bug Fixes

• hold uncharged provider-capacity re-dispatch on pool recovery

Features

• pause scout-backlog-drain when a human backlog is present

Features

• four missing Terminal audit emissions — blocker.asked/.answered, runner.online, inbound.received
• Terminal 06 — panes: split, zoom, close, per-pane filters, layout persistence

Bug Fixes

• fleet status names the planes it read; a roster/KV disagreement is never reported as an outage

Features

• the harness watches its own memory, and boxes get the room

Features

• cap each task in its own cgroup so a runaway gate dies alone

Features

• Terminal 05 — live tail: SSE consumer, follow mode, boot sequence, reconnect

Features

• size the dz-runner unit's memory from box RAM, OOMPolicy=continue, posture alert
• Terminal 04 — the page: nav row, window chrome, status line, backfilled log

Features

• Terminal 03b — the three GET routes over the org console's wire type

Bug Fixes

• Terminal subject.id is a real id of its kind — session fallback replaces the 26 audit-row/foreign-id sites
• a revoked row no longer makes a box's address read as a shared front door

Bug Fixes

• a person on a bound credential is still a person

Features

• human-backlog count — the inverse signal to scout-drain

Bug Fixes

• person-started means a person was actually there

Features

• a brief that bounds the work to a file set refuses an escaping group at admission

Bug Fixes

• audit feed stamps date for rows outside today
• cut shell comments inside the ref guard's scan, not after it

Features

• the home page shows the fleet working, and every figure carries a dated source
• four pages a buyer reaches, and no deck that publishes an internal number
• the home page says what the owner ruled, and no figure on it is uncited
• the explainer shows the pipeline at zero JS, the architecture claim has a page, and no deck can print an internal number
• a repo agent's declared tools narrow the seat, instead of being read and dropped
• five sections whose claims the ledger cleared and which shipped nowhere
• recipe bodies become markdown served verbatim, with the calls still schema-checked
• the writes only REST could do, and three gaps closed with a reason
• the once-per-repo journey, and a #{{key}} that resolves to nothing says so at write time
• seven recipes for the journeys nothing taught, and a coverage guard over the whole surface
• one read answers "anything waiting on me?", and the push decision is written down

Bug Fixes

• a selection's lane comes from the files it names, not the argument's spelling
• a settled follow-up's worktree is released only when git proves it pushed
• name three orphan wire codes — a stamp is not a grade
• the thread scan counts every skip, not the two rules it names
• GitHub's own merge refusal reaches the row a caller reads
• a repeated tool call whose ANSWER changed is not a loop
• review presence refuses a floor review on every lane, not just the bot lane
• infer model prices from the provider's published rate card instead of dropping it
• an editor seat's claim refuses the write, instead of being graded after the round
• futility counts per answer within a mutation epoch, not as a streak
• a pool refusal names the top-up, not "nothing to fix"
• a codegraph connect has a whole-connect ceiling, and the loser of that race is reaped
• the gate discovers what git says is in the repo, instead of whatever is in the directory
• an inline comment is the finding, and nothing else
• codegraph installs the version this repo pins, verified against a digest of ours
• a refusal names a verb, a URL or a role — and none of them loops
• the merge gate reads the mandatory pass set that approval is already gated on
• a tool's permission family is a property it carries, not a substring of its name
• docs({q}) stops inlining the wrong guide, and every tool row names it
• the policy a prospect is shown comes from the guarded module, not a JSX literal
• the /vs/devin lead stops claiming what is worth building, and the guard gains an axis rather than a fifth spelling
• a waitlisted person is told why in the chat client, and approval hands over the MCP URL
• the setup lane composes the tenant cascade, so prompts written before project setup actually shape it
• the weekly digest aggregates in SQL instead of loading a week of audit jsonb into the worker
• the mockups stop stating a price nobody can source, and a guard refuses the next one
• a hidden mockup may not hold a focusable control, and the decision moves to the variant
• one array answers who holds a region, so the lead stops naming a seat that never ran

Features

• Solo $100 flat for personal accounts, Team $500 per AI dev for life

Bug Fixes

• end a run that advances turns without getting anywhere

Bug Fixes

• a drained run's work survives the box, instead of dying at the gate

Bug Fixes

• the post-edit check arms for a hive editor, and reports rather than ends
• triage re-asks once when the judge schedules nothing or answers an unknown verdict
• one box learns the pool is still empty, not eight

Features

• a task's second PR stops being invisible, and a reply keeps its warm box

Bug Fixes

• the BYOK anthropic provider carries the tool-name shim — the last unwrapped Anthropic-wire builder

Features

• publish the prediction, and the limit that says it knows the task
• per-project agent modes — switch a mode off, narrow its tools
• every model call says when it started, that it is still running, and what it cost
• an Owner label names who started each custom plan
• a fix round answering only minor findings is bounded to the size of its answer
• the audit tail index, run out-of-band, and a backfill scope narrowed to what cannot be mis-attributed
• one intake door, and a triage verdict that asks

Bug Fixes

• sit the ARTIFACT_SLICES floor below its measurement
• scale a review's cost with the diff — one sample, capped output, on a small change
• the repo root is an allow-list of files, not of markdown
• move the platform Redis off 6379 and hand REDIS_URL only to repos that declared it
• each stall-holders case owns its account, so no case claims another's rows
• a re-read of an unchanged head raises no new threads
• the stall-holders setup no longer asserts an undecidable claim order
• an orphan row that grants privilege is never adopted by login alone
• adoption holds the user row, so a membership cannot commit under it
• a gate that refuses to grade twice latches, instead of being re-offered forever
• a box-local failure excludes the box that produced it
• a latched gate ENDS the run, with the gate as its reason
• the landing gate excuses a path by what the run WROTE there — content and mode, at both windows
• 0209 skips the null that would collide with the orphan-login unique
• the router provider rewrites dotted tool names — k3 refuses them (fleet down)

Features

• every lane audits the sha256 of the prompt it sent, per layer
• the Terminal wire type and the exhaustive projection over 186 audit kinds
• the harnesses warn before they kill, keep what the model needs, and index repo skills
• a red team attempt's diff is resumed from dz/wip/<task>, not re-surveyed
• stronger fs/search tools and per-route thinking mode

Bug Fixes

• the runner unit allows AF_NETLINK, so getifaddrs works in every child
• an over-cap babysit file set is coarsened into subtrees, not emptied
• a diff-owned red with no readable path still buys a fix wave
• guard trips and the session leash stop live work; the kill ladder is kit's reaper; leaked pgids reach the next pass

Bug Fixes

• a red base no longer blocks every diff — the gate compares failure sets
• the autofix cut admits the lint leg closing itself

Bug Fixes

• a review no longer holds a declared editor, and task stalls names the real holder

Bug Fixes

• delivered repo secrets reach the agent's shell on the native lanes

Features

• the org-scoped Terminal tail, and the isolation guard that ships before any route

Bug Fixes

• bin/setup starts from a dependency tree derived from the checkout's lockfile