变更记录一览。

Bug Fixes

• classify provider quota exhaustion as a CHARGED failure kind

Bug Fixes

• gh.prs.merge asks whether a review happened

Features

• per-sample provider fallback for review ensembles

Features

• CI checks, prior discussion and sibling tests reach the reviewer

Bug Fixes

• gate-4 reachability — read merge state off the PR-owning task

Features

• refuse an inference endpoint that answers 200 without being an API

Features

• a mandatory pass matrix — hunk coverage cannot say WHICH kind of review ran

Features

• an approved-model list per lane, refused loudly at dispatch

Bug Fixes

• stamp the team lane's no-checkout refusal too

Bug Fixes

• a quiet provider is a transport fault, not a model that said nothing
• stamp machine error codes at every named failure seam

Features

• category regression fixtures and recall
• per-pass model routing + per-pass cost observability

Features

• back the fleet dispatch tool with a real ToolContext port

Bug Fixes

• main is red on a fixture for a throw that no longer exists

Features

• give the maintainer session a fleet dispatch tool
• an approved-model list per lane, refused loudly at dispatch

Bug Fixes

• a wall clock was the shadow sweep's CAS token, so a stale write won

Features

• a customer sends a PR url, and one command says what broke
• alert on the three failures that reported success

Bug Fixes

• babysit called a PR mergeable that GitHub refuses, then PUT it 19 times
• a deleted janitor kept firing daily and box-warden ran two schedules at once
• bound the whole session with the wall-clock leash, not just the model loop

Bug Fixes

• the tree contract's coding evidence read idempotent redelivery as a wrong tree

Bug Fixes

• triage escalated 7 asks to a human and hid all 7 from them

Features

• give the plan DAG a dead-tail exit, and make a model that never reaches turn one visible
• declare which tree each lane may read, and refuse the scout on an unproven one

Bug Fixes

• the repo gate took a fleet box down, so scope it to the change

Bug Fixes

• the reviewer filed major findings about code its own fan-out withheld from it

Bug Fixes

• a migration whose journal when is not the newest is silently never applied
• the team coding lane handed setsid a sentence, so every native box failed in 2ms

Features

• the reviewer discloses a takeover, salvages a sample, and can finally read the repo's memory

Features

• the fleet self-heals, and a personal box can serve its owner across orgs

Features

• operator-initiated credential re-issue verb
• persist NATS credential expiry and alert on failure to refresh

Bug Fixes

• the coding lane failed 100% of runs on a coordinator that echoed the manifest schema

Features

• enumerate the deterministic failure kinds and budget them at today's values
• task-failure-report — the repeatable failure measurement

Bug Fixes

• a box re-issues its NATS credential twice on boot

Bug Fixes

• name the files the devops powers read, so the lane can produce anything

Features

• shadow-match pipeline — per-PR OUR-vs-CodeRabbit comparison rows
• provider model enumeration, pre- and post-capture

Features

• wire fleet runner through review pipeline

Bug Fixes

• let the runner write its own profile dir, and name a blocked write

Bug Fixes

• discover repos that predate the App install, dormant

Features

• connect panel + signed-out redirect + CORS + tests