变更记录一览。

Features

• run each closing issue's live-test fence after the deploy and write the verdict to the issue

Bug Fixes

• wire the triage judge into the fleet-alerts cron
• the CLAUDE.md byte ratchet pins per-file, closing the merge race

Features

• the scout can hand its context back, and mints nothing when it does

Bug Fixes

• drop engines.ladder — its pre-launch probe parks every mode-6 dispatch

Features

• watch the stall report, so a queue held for a day is said out loud

Bug Fixes

• a triage claim is counted, and an ask out of claims is settled instead of re-claimed forever

Bug Fixes

• a box-maintenance run asks for no git credential, so the weekly fleet-upkeep lane stops failing 31 of 31

Features

• /healthz reports the build sha through one release reader
• deploy only on green CI, record a production Deployment per sha, verify the roll live

Bug Fixes

• an unreadable policy file is not an absent one
• ui-debugger tool-service pair moves under.dz/ui-debugger/
• every surface names the policy home the runner resolves
• two lanes that destroy bytes on a schedule left no queryable trace
• main is red because a rename could not reach a test that did not exist yet
• the pipeline config is NOT green — both homes join the human-merge lane
• a box that cannot run the commit hook now repairs itself instead of discarding the work
• the qa.bug fingerprint, the digest period, and the box-warden roster each lied about dedupe
• four scheduled sweeps that could never converge now drain or say why
• cron lanes claimed a BullMQ retry they never registered, and one blind gather could silence every fleet alarm
• the maintenance lanes' own reports now say what they swept, skipped and why
• escalation nudges must name a performable action, not a label the repo lacks
• the merge gate waits for an incumbent reviewer, bounded by the window it already measured
• lift the "no unobserved claims" rule to the platform floor
• degrade to reasoning-on when OpenRouter refuses suppression
• append /v1 to z.ai Anthropic wire base URL
• record the model the provider SERVED, not just the one we asked for
• a superseded sha is not a failed release
• ceiling the whole-tree corpus-guard rescans at 30s, not bun's 5s default
• extract the triage-judge module and its alert kind
• mask credential shapes in git output, not only URL userinfo
• a provider reset stated without a year is dropped, and a rolled calendar day is fabricated
• the dev Dragonfly stops keeping every 10-minute snapshot forever
• the status-POST retry ladder holds the process alive, and a spawned-process guard proves it

Bug Fixes

• make a corpus freeze git discards impossible to write

Bug Fixes

• a review that could not look approved the PR — 118 real GitHub approvals in 7d from runs with no codegraph

Bug Fixes

• the lane that deletes release bytes four times a day audited to stdout, so prod holds zero rows for every pass it ever ran

Bug Fixes

• a reasoning model reached through a gateway escapes the suppression gate, so a bounded review call spends its whole budget thinking
• the at-head index syncs a throwaway copy and deletes it, so every review re-pays the checkout's whole drift
• the arbiter reads the two new held axes, and the hold pass keys on the gates whose ONLY writer is this claim

Bug Fixes

• a cache keyed so nothing can ever read it, and a merge that cancels the only gate the commit behind it will ever get

Performance

• a scripts edit typechecked the whole repo three times, and the fast path everyone reaches for is unsound

Bug Fixes

• the harness named the wrong registry, prescribed the command every brief bans, and prompted for the reads it tells agents to run

Bug Fixes

• a review that paid for tokens and printed no cost line, MCP children that leaked on the polite path, and four more prompt seams than anyone had counted
• ten screens whose data body was an error box, one socket per widget, and a client type wrong on every field it disagreed with the server about

Bug Fixes

• a by-id key read whose fence was a fourth-caller coin flip, and the id-brand split that would have made the plan's next step an outage
• a kill path that cancelled its own SIGKILL, a drain that could not release a queued member, and three guards that had gone blind

Bug Fixes

• a repeatable sweep that pruned nothing for its whole life, and a lane that declares its audit instead of forgetting it

Features

• the last six gates, where the census was wrong in five of six, plus an agent roster that had been prescribing the whole-tree gate to subagents

Bug Fixes

• a plain comment stopped clearing a CHANGES_REQUESTED, and the merge gate stopped grading 30 of a PR's reviews

Features

• the feature tax is seven numbers priced against real commits, the time budget its own measurement refuted is reverted, and a lane that timed out in silence now says why

Features

• a per-test time budget that fails in place, seeded at today's slowest deliberate test

Bug Fixes

• merging two lcovs was unsound, and the coverage ratchet runs in no CI job

Bug Fixes

• the repair runs BEFORE the baseline probe and the fix wave, and its tail is capped

Features

• a gate that refused to grade gets one and one more gate

Bug Fixes

• the autonomy population comes from the repository listing, and a scripts-only CI run stops falling through to a bare

Features

• the honest coverage number, per workspace, and a ratchet that cannot lower it

Bug Fixes

• name the OFF-SCHEMA non-answer too, not just the not-JSON one
• a test's wait budget stops being its own timeout, and a pinned clock stops making a ceiling vacuous

Bug Fixes

• scope the catalog-budget ledger guard to the NEWEST entry

Bug Fixes

• a test file stops handing the next one a pinned clock, a wrong Redis client and a DOM's streams

Features

• the structural gates, seeded at today's measured numbers, and the one bypass the compiler can take over

Bug Fixes

• a retry is eligible for another box, never guaranteed one