Changelog
- 0dec231 Merge pull request #3254 from Gentleman-Programming/feat/3249-pi-runtime
- 4004a08 Merge pull request #3261 from Gentleman-Programming/feat/3249-materialize-provider-task
- 91359b2 Merge pull request #3277 from Gentleman-Programming/feat/3264-materialize-provider-roles
- 2b2a747 Merge pull request #3283 from Gentleman-Programming/feat/pi-background-policy
- 353c6e6 Merge pull request #3300 from Gentleman-Programming/fix/negotiated-mode-silent-stderr
- 9050748 Merge pull request #3305 from Gentleman-Programming/fix/legacy-snapshot-identity-classification
- 9437111 Merge pull request #3310 from Gentleman-Programming/fix/reviewer-path-admission-scope
- 059508e Merge pull request #3313 from dnlrsls/fix/3307-post-approval-unborn-status
- c29f879 Merge pull request #3317 from Gentleman-Programming/feat/recovered-opencode-transport
- a344917 Merge pull request #3324 from Gentleman-Programming/feat/recovered-generic-validator
- f037a8b Merge pull request #3328 from Gentleman-Programming/feat/recovered-openspec-classification
- f300eb4 Merge pull request #3331 from Gentleman-Programming/feat/recovered-verify-attestation
- b1afef4 Merge pull request #3334 from Gentleman-Programming/feat/recovered-validator-wiring
- cca925f Merge pull request #3340 from Gentleman-Programming/fix/exploration-only-ambiguity
- 60f5bbc Merge pull request #3341 from Gentleman-Programming/fix/remediation-failed-baseline
- a56b6a7 Merge pull request #3344 from Gentleman-Programming/fix/opencode-host-binding
- 112798f Merge pull request #3345 from Gentleman-Programming/fix/recovery-selector-replay
- 332e5ca Merge pull request #3347 from Gentleman-Programming/fix/published-schema-conformance
- aab2aaf Merge pull request #3348 from Gentleman-Programming/fix/gate-denial-truthful-causes
- 0f4d87b Merge pull request #3351 from Gentleman-Programming/fix/skill-registry-root-guard
- b0949fb Merge pull request #3359 from Gentleman-Programming/fix/capture-evidence-typed-refusal
- d657a3d Merge pull request #3362 from Gentleman-Programming/test/cross-lane-battery
- 2027890 Merge pull request #3364 from Gentleman-Programming/fix/schema-pi-relay-drift
- 8f0625b Merge pull request #3366 from Gentleman-Programming/docs/battery-and-current-state
- 8bcd271 Merge pull request #3368 from Gentleman-Programming/fix/3281-manifest-context-budget
- 733dee1 Merge pull request #3376 from Gentleman-Programming/fix/3285-rar-path-rollback
- bdd4121 Merge pull request #3383 from Gentleman-Programming/fix/opencode-materialization-mismatch
- cfd513d Merge pull request #3388 from Gentleman-Programming/fix/3367-large-candidate-reviewable
- 051dc88 Merge pull request #3392 from Gentleman-Programming/fix/validator-and-inconclusive
- d95099f Merge pull request #3395 from Gentleman-Programming/fix/windows-ci-green
- 1455767 Merge pull request #3402 from Gentleman-Programming/fix/correction-scope-killswitch-advisory
- a741d94 Merge pull request #3405 from Gentleman-Programming/fix/windows-shard-timeout
- a5f238b Merge pull request #3407 from Gentleman-Programming/fix/agent-install-failures
- fcbbcd6 Merge pull request #3410 from Gentleman-Programming/fix/unrelated-lineage-friction
- 0a33077 Merge pull request #3413 from Gentleman-Programming/feat/rdd-default-off
- 9f90688 Merge pull request #3415 from Gentleman-Programming/feat/review-store-reset
- 301fb2a Merge pull request #3421 from Gentleman-Programming/fix/opt-in-lineage-scope-tests
- c28356f chore(review): merge current main into issue 3307
- 4609abd ci(windows): rebalance internal/cli shards by measured cost
- b6dbb4c feat(pi): managed background-subagents policy for the pi runtime
- 635defc feat(review)!: make receipt-driven development opt-in
- efa96be feat(review): add clone-scoped review store reset
- 6b2956d feat(review): declare non-blocking finding disposition on approved receipts
- 773eb54 feat(review): finalize captured targeted-validator slots generically
- dbe9aeb feat(review): materialize refuter and validator provider tasks for the pi host relay
- 9a41244 feat(review): materialize the Go-issued provider task for the pi host relay
- a13e5d9 feat(review): register pi as a host-mediated runtime identity (#3249)
- 34794a2 feat(sdd): attest the post-review verify report through native settlement
- 9e0a8c3 feat(sdd): wire the hidden review-validator OpenCode role
- 4dac6e8 fix(bench): restore the drift stop expectation in the frozen-lineage journey
- dac7926 fix(cli): keep the interactive consent ceremony on negotiated starts
- 145942a fix(cli): make successful negotiated review operations silent on stderr
- d92941e fix(contracts): admit pi agent and capture-result submission in published v2 schemas
- d6d9770 fix(contracts): admit the status-v5 disposition preview projection
- a5751b9 fix(contracts): align published review schemas with live envelopes
- f6dc2b2 fix(crosslane): always clean the work root and bound real-host runs
- d4c878f fix(install): avoid optional agent runtime failures
- d6134f4 fix(pi): project only managed background decisions and never fail the apply stage over a foreign policy file
- a676d9e fix(pi): update the windows-only TUI compatibility caller for the background signature
- f065f2e fix(review): admit companion test paths in a bounded correction
- 7cdcfe5 fix(review): admit contract-shaped host bindings by value, not bytes
- aded38d fix(review): apply the clone kill switch for every gentle-ai
- ade065a fix(review): bind the RAR directory repair to a no-follow descriptor
- a36736a fix(review): bind the relay prompt to Go materialization and fail-close deferred completions
- 52f9734 fix(review): bound and fail-close the OpenCode relay pass-through completion
- 0fe946e fix(review): bound inconclusive validator recapture
- a01e35c fix(review): bound reviewer evidence by bytes and refuse before START
- e63a9a3 fix(review): bound the adversarial pi execution with a deadline
- 72ccf9e fix(review): bound the emitted changed-path manifest to one line per entry
- 87838c4 fix(review): classify empty unborn staged assessment
- 2a9be04 fix(review): classify every lens-context representability probe outcome
- 3ed903b fix(review): classify host-echoed materializations as first contact
- 9bb83a5 fix(review): classify prior-schema snapshot identities and offer a fresh start
- 7b5245e fix(review): complete the inconclusive recapture route for host runtimes
- d9c32f8 fix(review): decide Windows RAR repair ownership by token control
- 49b5b6e fix(review): decide an added test path by its own toolchain
- 2268836 fix(review): decide the store reset under the lease it takes
- ee60cd8 fix(review): drop --bare from the claude reviewer transport
- f2a6ae1 fix(review): emit typed refusals for evidence and result captures
- ba1d934 fix(review): encode verification evidence ledger_ids as an array
- 27e4a51 fix(review): execute adversarial role captures through a Go-owned pi process
- 501d661 fix(review): gate pi admission on the declared host relay contract
- 26853f7 fix(review): gate role submissions and fail closed on malformed role capture transitions
- e785ce6 fix(review): give compiled-runtime finalize a deadline that fits a model run
- 2bc4304 fix(review): give the targeted validator its inspection recipe
- 8b98b26 fix(review): harden the OpenCode transport relay binding and lifetime
- 43fda43 fix(review): honour the widened correction scope at the delivery gate
- 347b087 fix(review): keep the RAR path the kill switch tells you to repair
- c8df50f fix(review): keep the frozen-drift stop and surface captured-slot read errors
- e3d4613 fix(review): make the RAR directory repair reachable after an interrupted run
- 996e620 fix(review): make the RAR repair write what its own rule accepts
- f1a9517 fix(review): make the pi host-relay capture input advance through its submission
- 0c8f866 fix(review): make the relay registry owner invariant explicit and loud
- 81b0b74 fix(review): name a recovery that actually turns reviews on
- fae1447 fix(review): name a way forward when a repair preflight truncates
- 1e68000 fix(review): name retry-safe causes in gate receipt discovery
- ef6d929 fix(review): name the live lock holder on Windows gate denials
- 614f49c fix(review): name the offending token when admission rejects out-of-scope citations
- ee114e4 fix(review): narrow inventory-busy to provably self-clearing contention
- 9abdf32 fix(review): observe reviewer context level after revision re-derivers
- df9af3e fix(review): pin the evidence digest domain across ledger encodings
- 6ba932f fix(review): preserve the native refusal when envelope emission fails
- dbf60bd fix(review): publish schema-safe targeted-validator collect input name
- 85affd7 fix(review): replay the authorized untracked selection in recovery transitions
- 50d4b3d fix(review): roll back the widened scope when a correction escalates
- f9bcfa7 fix(review): route inconclusive targeted validation as retryable
- 5d51e3b fix(review): scope the prior-schema fresh-start exit to the named lineage
- c94924b fix(review): state the candidate's own situation in an unrelated denial
- 45873da fix(review): stop store reset destroying what it reports as spared
- 8af8a17 fix(review): teach reviewers to describe rather than reproduce path-shaped candidate literals
- 7d955da fix(review): treat an unscannable mirror as unreached
- 9191999 fix(sdd): anchor the verify-report path by canonical spelling
- aea49f6 fix(sdd): classify shared OpenSpec scaffolding as change-neutral
- 33aa49c fix(sdd): emit runnable change-selection continuations
- 7dda15f fix(sdd): exclude exploration-only directories from active change selection
- 765e46c fix(sdd): fold anchor case exactly where the platform folds it
- d328e63 fix(sdd): gate status classification unconditionally and drop the dead error return
- 445faf7 fix(sdd): judge remediation change against the failed evidence baseline
- cf87684 fix(sdd): keep changes active when exploration classification cannot stat
- 7af9a16 fix(sdd): make verify-report attestation honest, anchored, degradable, and read-only on status
- 7eec13c fix(sdd): mirror the failed-baseline predicate in remediation replay
- 7aa2299 fix(sdd): prove the report-only delta before routing digest-less settlements to attestation
- 0efb8b9 fix(skills): align the plugin project markers with the CLI guard
- a1bffc1 fix(skills): guard skill-registry refresh against non-project roots
- 672fb7c test(bench): declare every journey's review precondition
- 6562c15 test(review): add --with-host real-host tier to the cross-lane battery
- c17f6b5 test(review): add local cross-lane battery for host-frame, lifecycle, and schema seams
- c0c7b69 test(review): guard scoped abandon at the CLI boundary
- c5b7e5c test(review): opt the lineage-scoping tests into review mode
- cf4bded test(review): opt the merged unborn staged test into review
- 83890ac test(review): pin the undrifted finalize and the drifted finalize refusal
- aaf094e test(review): reach the captured evidence conflict refusal
- 1416097 test(sdd): skip the aliased spelling where symlinks are unavailable
- 32deddf test(sddstatus): opt review lifecycle fixtures into review mode
- 0e297f4 test(sddstatus): state the switch-on premise the offer tests assumed