变更记录一览。

Bug Fixes

• arc 101 sweep wave D — a cross-tenant list, a dead-end locale, a silent push kill, and a drained grant

Bug Fixes

• hold throttle floor in memory when stamp read fails

Bug Fixes

• arc 101 sweep wave C — a bogus APPROVE, a wrong-tree review, SSRF, and a gate that lied

Bug Fixes

• arc 101 sweep wave B — unmetered 500s, missing audit, IP spoofing

Bug Fixes

• arc 101 sweep wave A — plan cycle, task retry, terminal durability

Bug Fixes

• the per-repo secrets LIST was unreachable — move the collection to /v1/repos/:owner/:repo/secrets

Bug Fixes

• refuse a branch carrying commits we did not author

Bug Fixes

• the box installs the newest release IT can, not the head

Bug Fixes

• never cut a task branch over work the task does not own

Bug Fixes

• the free-disk guard read TOTAL filesystem size, so it never fired

Bug Fixes

• review the head a rate-limited CodeRabbit skipped

Bug Fixes

• a rate-limited review bot's green status is not CI

Bug Fixes

• stop guessing our own bot identity

Features

• link a human-authored PR to the issue it answers

Bug Fixes

• the bot's PR body shipped as a file in the repo root

Bug Fixes

• make the merge gate guard its own config

Bug Fixes

• check policy.release.manager before scheduling release runs
• the security page said we do not hold scopes we hold

Bug Fixes

• a repo that committed no.maintainer.yml gets no releases

Features

• --upkeep-only, so an already-enrolled box can get OS upkeep

Features

• pull-based pre-work version check so the fleet converges
• OS upkeep timers so a box added to the fleet stays healthy

Bug Fixes

• a halt withdraws the build — re-point the channel alias

Features

• honor language in the review prompt

Features

• alert when a bot-lane PR is not authored by developerz-ai[bot]

Bug Fixes

• bench now admits the post-spec DropReason set, plus the citation drift
• pin the disclosed bot commit identity on the coding lane

Bug Fixes

• documented edit path for the key's billing kind

Bug Fixes

• close the env seam in service code, and enforce it

Performance

• hoist EXPECT_TEXT + CONTRACT_TEXT into the cacheable prefix

Features

• open the funnel's front door — create a project, establish a base

Bug Fixes

• decide the env seam, and delete a lane that re-proved covered ground

Bug Fixes

• key policy activation to the file's own commit time, not the branch tip
• pin the Playwright installer to the version the tests run under

Bug Fixes

• global cron sweep replaces the dead-on-arrival reverify filter

Features

• the decorrelation A/B harness