Changelog — v1.x

Archived releases. The current major is in the changelog.

1.11.0 (2026-07-22)

Features

• docs-refresh: exhaustive doc-side alignment — enrichment audit + promises ledger (v2.5.0) (69c9325)

Bug Fixes

• docs-refresh: reverse-audit precision — Revi findings on v2.5.0 (e7a518c)
• sandbox: push script tool-node bodies into copy-based sandboxes (2dc71f5)
• server: exempt per-run token surfaces from the operator-JWT gate (#275) (ca09a62)

1.10.0 (2026-07-22)

Features

• review-pr: env-overridable second-reviewer backend — Claude-forfait-only instances (#272) (fadb2d9)

1.9.7 (2026-07-22)

1.9.6 (2026-07-22)

Bug Fixes

• studio: bound pipeline card titles (#269) (fc3cf9a)

1.9.5 (2026-07-22)

Bug Fixes

• pipelines: keep human reviews in FIFO order (#267) (319f69e)

1.9.4 (2026-07-22)

Bug Fixes

• claude_code: forward the runner's ambient Anthropic env into sandboxed spawns (#268) (c276166)

1.9.3 (2026-07-22)

Bug Fixes

• sandbox/k8s: mark the pod workspace git-safe — dubious ownership broke sandbox start (#266) (018164c), references #265 #265

1.9.2 (2026-07-22)

Bug Fixes

• sandbox/k8s: default sandbox.user to the published images' uid (#265) (a0260fa)

1.9.1 (2026-07-22)

Bug Fixes

• runner: sandbox-by-default at the runner entry point (#263) (b72c7f5)
• sandbox: unusable devcontainer falls back to the default image at the ambient tier (#264) (4992aaf)

Performance Improvements

• ci: provenance + SBOM only on release builds, matching the sign policy (8fb3250)
• ci: publish single-arch final tags in the amd64 job, skip the merge runner (b7ed29b)

1.9.0 (2026-07-22)

Features

• sandbox: ADR-082 Phase 3 blockers 1+3 — in-pod git push + Claude forfait auth on the kubernetes driver (#260) (0721364)
• sandbox: HTTP fallback for the ask-user MCP channel (ADR-082 Phase 3) (#259) (a30aaed)

1.8.0 (2026-07-22)

Features

• bots: issue-triage bundle (Triagy) — single-shot card router on the trigger spine (f6f00a1)
• bots: verify_build must mirror CI codegen-drift gates up front (5f0a58e), references #250 #246
• forge,server: author identity on cards + fail-closed author-trust classifier (cdb9421)
• runview: register in-process subbot children with the run Manager (183a397)
• server,boardmongo,trigger: cloud half of the board trigger spine (ffe6108)
• server: trust-stamp forge→board sync + preserve board-local labels (1a0b74c)
• studio: approval banner + Approve & triage on parked external-author cards (6da332d)
• trigger: direct-execution board invocations with one-shot consume_labels (d6933fb)
• webhooks: author-trust gate on the AutoImplementOnOpen issues lane (9b5209a)

Bug Fixes

• bots,boardops: issue-triage dogfood hardening — reliable tool procedure (4aec346)
• bots: drift-gate precheck no longer misreads commit-if-changed CI as a gate (7288f09), references #250
• bots: verify_probe ITER ref must not be author-quoted — shellEscape already quotes (0da7928), references #250 #246
• ci: bump buildkit-operator pin to v0.12.0 (best-effort S3 cache export) (98e6fca), references #1
• dispatcher,runview: stop the orphan reconciler from killing live dispatcher runs (e2bfd13)
• dsl: quoted-integer loop cap as fix("2") no longer silently compiles to 0 (141d944)
• model: json schema field emits a type union so codex/OpenAI accept it (1166d32)
• runtime: re-finalize when the recorded finalize is stale vs the worktree HEAD (ded122c)

1.7.1 (2026-07-22)

Bug Fixes

• runs: keep schedule provenance in cloud + surface it in the studio (f1e78e2)
• secured-renovacy: pin iterion-sandbox-full:edge — CI never publishes :latest (6f550d9)

Performance Improvements

• docs-refresh: fix the budget/production ratio — verify fast-path + scanner denoising (#256) (13229d8)

1.7.0 (2026-07-22)

Features

• deterministic tokenless-in-workspace forge review publishing (endpoint + review-pr adoption) (#261) (3611f30)

1.6.0 (2026-07-22)

Features

• bots: ADR-082 Phase 2 — remove per-bot sandbox settings, keep toolchain-only pins (#258) (6018d72), references #252

1.5.1 (2026-07-22)

Bug Fixes

• studio: replay no longer shows "No log captured." past the log window (#257) (eae9a14)

1.5.0 (2026-07-22)

Features

• docs-refresh: dismissals ledger — false-positive adjudications persist across passes (#254) (aff5e02)

1.4.1 (2026-07-21)

Bug Fixes

• e2e: un-flake TestAwaitAnswersReleasedByAnswer under -race (#253) (9c87522), references #252

1.4.0 (2026-07-21)

Features

• sandbox: sandbox-by-default at product entry points (#252) (ac5585a)

1.3.1 (2026-07-21)

Bug Fixes

• docs-refresh: pass build_manifest list inputs as argv, not env (#251) (37c36f7)

1.3.0 (2026-07-21)

Features

• docs-refresh: opt-in PR finalization tail (open_mr) — v2.2.0 (#249) (c3ae900)

1.2.0 (2026-07-21)

Features

• budget: warn_tokens — advisory token threshold that warns without blocking (#248) (231b355)

Bug Fixes

• store: decode Mongo documents into the shapes the code asserts (ff8f8c8)

1.1.1 (2026-07-21)

Bug Fixes

• studio: human-gate answer surfaces schema-load failures instead of a dead fallback (#244) (#245) (66d62a2)

1.1.0 (2026-07-21)

Features

• backend: non-blocking ask_user_async + await_answers on both backends (ADR-081 phase 2) (d9e2bf8)
• dsl: interaction async mode + await_answers node (ADR-081 phase 0) (9c1470b)
• notifications: web push for human-input pauses and run outcomes (668d7f2)
• runtime: await_answers sync points — node + tool escalation (ADR-081 phase 3) (b051a59)
• store,engine: async interaction primitives (ADR-081 phase 1) (a5bcc09)
• studio: surface a deployment as a delivery, not just a URL (e90b0e9)
• surfaces: answer async questions from studio/REST/CLI (ADR-081 phase 4) (c5d8172)

Bug Fixes

• adr-081: dogfood fixes — CLI answer message ID + example user prompt (6de6335)
• adr-081: review findings — atomic answer CAS + benign auto-resume race (1fab626)
• ci: green main — pin async-questions backend + kill webpush Deliver data race (#247) (52fc109)
• notifications: address the four defects from the bug review (38f05f9)
• runtime: keep a cloud run's git workspace alive across deliveries (4949bf3)
• runtime: provision devbox tools on the host when there is no sandbox (5adbe96)

1.0.0 (2026-07-21)

⚠ BREAKING CHANGES

• cli: replace init with bots create, name the entry points

Features

• app-dev: ask for the package flip as soon as the link is valid (c1b0c1c)
• app-dev: ask the operator for the one step no token can take (82a3214)
• app-dev: opt-in, platform-agnostic deploy phase returning a live URL (941c395)
• bots: extend launch: hierarchy to the remaining catalog bots (e127fe4)
• bots: sec-audit state moves to neutral paths — universality allowlist at zero (backlog E2) (a47f422)
• claw: ambient plugin-MCP parity — claw nodes reach firecrawl like claude_code (f613dda)
• cli: replace init with bots create, name the entry points (eddc642)
• cloudsched: sub-minute keepalive schedules via NextFireForBot (0ff64db)
• config-editor: cross-path from a bot's page to its config editor (c31a52f)
• config-editor: group config-shares by repo → bot → share (7bffebe)
• config-editor: name the bot group by its persona (display_name, e.g. Vigie) (97d8675)
• config-editor: real config exploration — search + collapsible repo/bot tree (419cd02)
• config-editor: show a veille editor the recent digests of their category (327c682)
• docs-refresh: openwiki-inspired noop short-circuit + persistent cache (d1bd403)
• forge: key the GitHub App by connection, not by (tenant, provider, host) (ca3d939)
• forge: let an App publish CI + images, and never over-request at mint (6518214)
• keepalive: wire local overlap/reap gate + auto-load keepalive subs + docs + example (cd205dd)
• pluginsource: durable, org-scoped plugin bindings backed by git (c054728)
• runtime,cloud: make plugin & library skills reach cloud runner pods (9330dad)
• sandbox: devbox first-class — a bot declares its tools, iterion loads them (9a27876)
• schedgate: keepalive overlap policy with staleness reaping (20d6404)
• server,cli: wire sub-minute keepalive scheduler + zombie reaper (c40bd11)
• server,cloud: wire plugin sources into launch + team REST CRUD (7735f5c)
• server: reject a launch whose repo the App installation cannot reach (617a55c)
• studio: always-on (keepalive) schedules in the Schedules tab (9d0ebf0)
• studio: clean ?bot=<slug> launch URLs instead of encoded file paths (bb4fc0d)
• studio: pick which GitHub App to install, and always allow a second one (aa5eaac)
• studio: pipeline board — 3 lanes, plan provenance, launch-now drag (#243) (297416c), references #193
• studio: root Home hub exposing every accessible surface (+ correct Veilles card) (68ebe12)
• studio: veille editor as a first-class /veilles route (scales with access) (1f8588b)
• trigger: sub-minute keepalive scheduler + keepalive invocation kind (5ec1ee6)
• wiki-gen: Wikky — navigable OKF wiki generator/maintainer (openwiki-inspired) (d9c2325), references #1

Bug Fixes

• app-dev: "could not verify" is not "verified bad" (6bfabe6)
• app-dev: make the deploy gate deterministic, not an LLM opinion (0157000)
• app-dev: make the deploy phase publish the image itself (05d0747)
• app-dev: require the delivery to be traceable, not merely live (9c74cb6)
• app-dev: the traceability gate was reading an unsubstituted template (d30f995)
• claude_code: surface auth + quota failures instead of masking them as schema errors (3535c6a)
• claude_code: surface the forfait WEEKLY limit instead of masking it as a schema error (e9d0b77)
• cli,bundle: close the three gaps left by the bots-create follow-ups (9169dbb)
• config-share: clearer share-link card — prefilled repo, "History" not "Deliveries", rotate/revoke impact (76b84ee)
• forge: drop the legacy one-app-per-host index in EnsureSchema (a9f02e4)
• forge: refuse a shared-App install that cannot be verified (80583d2)
• forge: report the RUNTIME token's permissions, not the management one (d941e82)
• model: recover structured output via claw when a backend can't emit it (e92db4a)
• mongo: a retired index drop must tolerate a missing collection (e3b8f07)
• projects: corrupt config fields fail the load instead of vanishing (backlog A) (c2e1352)
• runner: keep the clone's git credential live for the whole run (e30b7da)
• runner: stringifyVars honors its JSON contract for nested values (backlog A) (8206fb9)
• runtime: checkpoint-resume conversation reaches the backend task (backlog B2) (1136a15)
• runtime: the bot's own resources must reach catalog bots too (d7b4db9)
• runview: resolve a catalog-bot workflow from the bot catalog (d60c005)
• runview: resolve the catalog bot from the path when bot_id is absent (7a87ef2)
• server,cloud: actually construct the plugin-source store and resolver (2d10643)
• sessionboard: commit spec only after a successful publish (backlog A) (2e0eb5d)
• store: tombstone guard on all writers + typed absence matching (backlog A) (c65c750)
• wiki-gen: validate_wiki must not flag source-code links as dead (8ab92d6), references #anchor

Performance Improvements

• server: batch identity lookups in org tree and team listings (backlog A) (32f438c)