Changes
- Explicit private memory: standalone
Remember that <one fact>requests persist a journaled private note without a helper, including Codex. Includes provenance, simple corrections, expired-fact renewal, secret refusal and accurate persistence/Undo receipts. - Safer Notes Undo: stale journal entries refuse to overwrite later edits; concurrent changes are checked before writes and deletions.
- Durable routine webhook delivery receipts: send
Idempotency-Keyto deduplicate retries for seven days. Authenticated retries return the original run; changed payloads conflict. Existing behavior is retained when no key is provided. - Opt-in Linux turn sandbox preview for Claude, Codex and ACP: explicit filesystem mounts, private process namespaces and temporary directories, and fail-closed startup checks. Disabled by default.
- Google Antigravity engine with isolated personal-account Google sign-in and discovered models.
- Planner tasks can explicitly execute through an agent or schedule execution. Delegated child turns cancelled during startup stop before executing.
- Updated engine/platform capability matrix and release qualification documentation.
Installers and upgrade
Experimental, unsigned installers: macOS ARM64 DMG and Windows x64 installer. The macOS installer omits native desktop preview. Signing/notarization and release-to-release update qualification remain open.
Desktop startup applies database migrations. Source/server installations must run alembic upgrade head from backend using their configured environment; migration b2e7c1d9a504 adds webhook receipts.
Qualification limits
The full CI release gate passed at 36276bc: SQLite 2,883 passed / 28 skipped; PostgreSQL 2,807 passed / 104 skipped; backend and server smoke checks and all 100 desktop tests passed. Local frontend validation passed all 219 tests. Conditional frontend and Chromium CI jobs were skipped because those areas did not change. Scripted provider tests do not establish real-provider compatibility.
The Linux sandbox preview shares the host network: enforceable network isolation remains unimplemented. Real Linux engine sign-in/resume/stop, real-provider behavior, installed-app workflows and upgrade/recovery remain separate qualification gates. Antigravity does not support Windows. See docs/CAPABILITIES.md, docs/SELF-HOSTING.md and docs/MEMORY.md in this release's source.